Republic of Korea: Closed consultation on second amendment to the Enforcement Decree of the Personal Information Protection Act

On 2 January 2024, the Korean Personal Information Protection Commission (PIPC) closed its public consultation on the second amendment of the Enforcement Decree of the Personal Information Protection Act. In particular, the proposed second amendment introduces enhancements to individual rights in the context of automated decisions. Individuals gain the right to request refusal or explanation of such decisions, with detailed procedures outlined. Furthermore, the amendment focuses on elevating the professionalism and independence of Personal Information Protection Officers (CPOs). In addition, the amendment establishes a legal framework for evaluating personal information protection levels in public institutions, defining criteria and procedures for improvement recommendations based on evaluations. Moreover, the amendment sets reasonable standards for compulsory insurance and reserve funds to cover potential liabilities comprehensively. The amendment to the Enforcement Decree follows the comprehensive amendment of the Personal Information Protection Act (Law No. 19234), which shall enter into force on 15 March 2024.