Republic of Korea: Personal Information Protection Act (Act No. 21445) entered into force, except mandatory certification provisions
Description
Personal Information Protection Act (Act No. 21445) entered into force, except mandatory certification provisions
On 11 September 2026, Act No. 21445, amending the Personal Information Protection Act, entered into force, six months after promulgation on 10 March 2026. Under the amended Article 30-3, the business owner or representative of a personal information…
Scope
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
central government
Complete timeline of this policy change
Hide details
2026-02-12
adopted
2026-03-10
adopted
2026-09-11
in grace period