Republic of Korea: Personal Information Protection Commission revoked designation of SK Shieldus as an personal information impact assessment assessment institution

On 24 February 2025, the Personal Information Protection Commission of South Korea announced the revocation of SK Shieldus Co., Ltd.'s designation as a Personal Information Impact Assessment (PIA) Institution under Announcement No. 2025-15. The revocation, which took effect immediately, was in accordance with Article 33 of the Personal Information Protection Act and Article 36 of its Enforcement Decree. This decision was a consequence of SK Shieldus's failure to conduct any impact assessments for a period of over two years without justifiable reasons. As a PIA Institution, SK Shieldus was authorised to evaluate privacy risks associated with data processing activities, ensuring compliance with privacy and data protection laws.