Republic of Korea: Adopted PIPC revised guidelines of personal information processing policy

On 30 April 2024, the Personal Information Protection Commission (PIPC) issued revised guidelines for drafting privacy policies, aligning them with amendments to the Personal Information Protection Act. The revised guidelines contain provisions on online behavioural information processing, emphasising transparency and accountability in data collection, use, and provision, especially in the context of personalised advertising. The guidelines encourage disclosure of behavioural information collection practices by personal information processors and third parties on websites or apps. Moreover, they clarify methods for disclosing privacy policies, requiring them to be easily accessible on websites/apps, particularly in mobile environments, and stipulate separate policies for each service or a comprehensive, integrated policy if multiple services are operated. Furthermore, the guidelines include tailored policies for children under 14, focusing on language accessibility and comprehension, alongside guidelines for public institutions and small businesses.