On 24 May 2024, the Personal Information Protection Commission (PIPC) opened its consultation on the draft Guide to the Rights of Data Subjects Regarding Automated Decision-Making, which will remain open until 21 June 2024. The draft guide has been developed in response to the implementation of the Data subject rights regarding automated decisions in the Personal Information Protection Act Enforcement Decree (Presidential Decree No. 34309), which took effect on 15 March 2024. The draft guide's objective is to enhance understanding among practitioners and ensure the stable implementation of the system by providing detailed information on the scope of automated decisions, the rights of data subjects, and the obligations of personal information processors. In particular, the draft guide outlines the obligations of data controllers, standards for automated decisions, and the procedures for data subjects to exercise their rights. Finally, in the event of a violation of the obligations outlined in the Act, the PIPC can issue a corrective measures order to stop the infringement, an order temporarily suspending the processing of personal information, or other corrective measures necessary to protect personal information and prevent further infringement. Failure to comply with a corrective action order may result in a fine of up to KRW 30 million.
Original source