Republic of Korea: Drafted second amendment to the Enforcement Decree of the Personal Information Protection Act

On 6 March 2024, the second amendment to the Enforcement Decree of the Personal Information Protection Act was adopted by the Cabinet of South Korea. On 6 March 2023, the Cabinet meeting passed a revision to the follow-up enforcement ordinance of the Personal Information Protection Act. The revised Act, which takes effect on 15 March 2024, establishes citizens' rights in the area of automated decisions due to the spread of artificial intelligence (AI) and provides for companies and public institutions that process large amounts of sensitive personal information to protect personal information more professionally. The Act also includes provisions such as strengthening personal information protection officer (CPO) qualification requirements.