Republic of Korea: Personal Information Protection Commission amendment to Enforcement Decree of Personal Information Protection Act was approved by Cabinet

On 16 September 2025, the Cabinet approved the amendment to the Enforcement Decree of the Personal Information Protection Act. The amendment aims to strengthen the domestic agent system for overseas businesses and expand obligations for local government-funded and -invested institutions. The amendment requires overseas operators with domestic subsidiaries to appoint local representatives responsible for management, annual training, planning, and inspections. The scope of public institutions now includes local government-funded entities. These entities must register personal information files within 60 days and, if needed, conduct impact assessments within two years. The measures take effect on 2 October 2025.