Republic of Korea: Personal Information Protection Act (No. 2208859) enters into force establishing representative system for overseas businesses

On 2 October 2025, the amendment to the Personal Information Protection Act enters into force. The amendment requires overseas businesses with a local subsidiary to designate that subsidiary as their domestic representative. The amendment introduces new obligations and sanctions for non-compliance. It aims to strengthen South Korea’s domestic agent system and adjust personal data protection requirements for foreign entities operating in the country. The Personal Information Protection Commission (PIPC) will be responsible for revising enforcement ordinances and conducting inspections to support the implementation of the new provisions.