Republic of Korea: Personal Information Protection Commission clarified that Toss’s "Face Pass" service has not undergone preliminary adequacy review

On 22 January 2025, the Personal Information Protection Commission (PIPC) clarified that Toss's “Face Pass” service had not undergone a preliminary adequacy review. This service, which automates ID verification at event venues to prevent scalping, differs from Toss's Face Payment service, which was approved through the review process in March 2024 for facilitating offline purchases via facial recognition. The PIPC encouraged businesses with compliance uncertainties to utilise the Preliminary Adequacy Review system to ensure legal adherence.