Digital Policy Alert logo

Republic of Korea: Mandatory personal information protection certification provisions of Personal Information Protection Act (Act No. 21445) entered into force

Policy overview

Description

Mandatory personal information protection certification provisions of Personal Information Protection Act (Act No. 21445) entered into force

On 1 July 2027, the amended Article 32-2(1) proviso and Article 75(2) item 15 of Act No. 21445, amending the Personal Information Protection Act, entered into force. Under the amended Article 32-2(1) proviso, personal information processors meeting …

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
central government

Complete timeline of this policy change

Hide details
2026-02-12
adopted

On 12 February 2026, the National Assembly adopted Bill No. 2216765, which amends the Personal Info…

2026-03-10
adopted

On 10 March 2026, the Bill amending the Personal Information Protection Act (Bill No. 2216765) was …

2026-09-11
in grace period

On 11 September 2026, Act No. 21445, amending the Personal Information Protection Act, entered into…

2027-07-01
in force

On 1 July 2027, the amended Article 32-2(1) proviso and Article 75(2) item 15 of Act No. 21445, ame…