Republic of Korea: Implemented amendment to the Enforcement Decree of the Personal Information Protection Act including changes in mandatory consent

On 15 September 2024, Article 17(1) of the amended Enforcement Decree of the Personal Information Protection Act (PIPA) entered into force. The subsection sets out the conditions that must be met in order for consent to be collected freely, including the ability for the data subject to make a free decision, the presence of specific and clear consent, legible and understandable content of the consent, and the ability to clearly indicate consent. Other parts of the amended Enforcement Decree were implemented earlier.