Republic of Korea: Announced PIPC Investigation into Personal Data Processing by Major Overseas Direct Purchase Companies

On 7 March 2024, the Personal Information Protection Committee (PIPC) of the Republic of Korea announced the commencement of an investigation into the collection and processing of personal information by major overseas direct purchase companies. The investigation, initiated in response to issues raised during a National Assembly audit, aims to assess the adequacy of personal information processing policies, overseas transfers, and safety measure obligations under the Personal Information Protection Act. The PIPC has stated that if violations are confirmed, actions will be taken in accordance with relevant laws and regulations.