Republic of Korea: Opened Consultation for PIPC Review of Personal Information Protection Act regulations

On 20 February 2024, the Personal Information Protection Commission (PIPC) of the Republic of Korea opened a public consultation to review the appropriateness of regulations related to the Personal Personal Information Protection Act (PIPA ) until 23 March 2024. The regulations under review include the Enforcement Decree of the Personal Information Protection Act, Contents and Method of Disclosure of Personal Information Processing Policy and Designation criteria and procedures, and matters related to certification assessment personnel. Stakeholders are encouraged to provide feedback on several aspects, including data handling specifics, policy frameworks, disclosure methods, the handling of sensitive and unique identification information, and data retention periods. The PIPA strengthens the principle of consent in order to allow data subjects to exercise their rights regarding their personal information. In addition, regulations applicable only to online settings also apply to offline settings in order to provide security measures for new technologies.