Description

Mandatory personal information protection certification provisions of Personal Information Protection Act (Act No. 21445) entered into force

On 1 July 2027, the amended Article 32-2(1) proviso and Article 75(2) item 15 of Act No. 21445, amending the Personal Information Protection Act, entered into force. Under the amended Article 32-2(1) proviso, personal information processors meeting …

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
central government

Complete timeline of this policy change

Hide details
2026-02-12
adopted

On 12 February 2026, the National Assembly adopted Bill No. 2216765, which amends the Personal Info…

2026-03-10
adopted

On 10 March 2026, the Bill amending the Personal Information Protection Act (Bill No. 2216765) was …

2026-09-11
in grace period

On 11 September 2026, Act No. 21445, amending the Personal Information Protection Act, entered into…

2027-07-01
in force

On 1 July 2027, the amended Article 32-2(1) proviso and Article 75(2) item 15 of Act No. 21445, ame…