On 16 December 2024, the Personal Information Protection Commission (PIPC) opened a consultation on a proposed amendment to the Personal Information Protection Act (PIPA) concerning enforcement procedures until 23 December 2024. The amendment supports the implementation of a previous amendment on 14 March 2023, which introduced individuals' right to request the transfer of their personal data. The amendment aligns data transfer notifications with existing requirements for data usage and disclosure, ensuring data recipients can verify the authenticity of transferred data and establishing procedures for secure transfers, such as intermediary use and a data transfer support platform. The amendment also defines the roles, classifications, designation processes, and operational standards for personal information management agencies and clarifies the PIPC's supervisory responsibilities over entities involved in data transfers.
Original source