On 22 May 2026, the Personal Information Protection Commission (PIPC) adopted the preventive-centred personal information management system transformation plan, introducing a shift from reactive enforcement to a risk-based preventive data protection…