On 12 May 2026, the Personal Information Protection Commission reported to the Presidential Cabinet Meeting a plan to transform the personal information protection system from a post-incident punitive model to a preventive, risk-based framework. The…