Republic of Korea: Cabinet approved revised Enforcement Decree and Enforcement Rules of the Personal Information Protection Commission including personal data incident prevention and investigation capacity expansion

On 23 December 2025, the Personal Information Protection Commission (PIPC) announced that the Cabinet approved revisions to the Enforcement Decree and Enforcement Rules governing the organisational structure of the PIPC. The revisions establish a Prevention and Coordination Officer and a Preliminary Inspection Division responsible for conducting prior inspections of personal data processing and identifying personal data risks before incidents occur. The revisions expand investigation and dispute resolution functions through the addition of six investigator positions and one dispute resolution position to address large-scale and complex personal data breach cases. The revisions also establish a Digital Communication Team to strengthen online public communication and the provision of information related to personal data incidents. The organisational reform increases total staffing by seventeen positions and reorganises the PIPC from one office and four bureaus to one office and five bureaus. The revised Enforcement Decree and Enforcement Rules enter into force immediately upon promulgation.