Republic of Korea: President signed Personal Information Protection Act (No. 2208859) establishing representative system for overseas businesses

On 1 April 2025, the President signed an amendment to the Personal Information Protection Act into law, which requires overseas businesses with a local subsidiary to designate that subsidiary as their domestic representative. The amendment, originally passed by the National Assembly on 13 March 2025 following approval by the Political Affairs Committee on 24 February 2025, introduces new obligations and sanctions for non-compliance. It aims to strengthen South Korea’s domestic agent system and adjust personal data protection requirements for foreign entities operating in the country. The Personal Information Protection Commission (PIPC) will be responsible for revising enforcement ordinances and conducting inspections to support the implementation of the new provisions. The law will take effect on 2 October 2025, following its publication in the Official Gazette.