Republic of Korea: Adopted PIPC order on strengthening responses to online personal information exposure and illegal distribution

On 23 October 2024, the Personal Information Protection Commission (PIPC) adopted an order to strengthen measures aimed at combating the exposure and illegal distribution of personal data online. The order is intended to prevent secondary damage, such as identity theft. It focuses on utilising Artificial Intelligence and machine learning technologies to detect and remove exposed personal data efficiently. The order emphasises expanding collaboration with internet service providers and the police to improve rapid response capabilities, with a focus on public involvement. Key initiatives include upgrading detection systems, ensuring prompt blocking of illegal distribution posts, intensifying enforcement on habitual offenders, and conducting comprehensive assessments of data exposure risks across public and private sectors.