On 7 April 2026, the Cabinet approved the draft Bill amending the Act on the Protection of Personal Information and Other Acts. The Bill applies to both public and private entities handling personal data. It introduces definitions for "contactable personal related information", "statistics creation, etc.", and "specific biometric personal information". Personal information handling business operators must notify individuals in advance of the purpose of use when handling specific biometric personal information. Individuals may request a personal information handling business operator to suspend use of, or stop provision to third parties of, specific biometric personal information identifying that individual. Special protections apply to the personal information of persons under the age of 16. An individual under the age of 16 may request suspension of use or cessation of third-party provision of retained personal data identifying that individual. Where a personal information handling business operator handles personal information of a person under the age of 16, references to "the individual" are read as "the individual's legal representative". Personal information handling business operators must give priority consideration to the best interests of minors in accordance with their age and stage of development.
Original source