The most significant amendments to South Korea’s Personal Information Protection Act (PIPA) since its enactment come into force today, overseen by the Personal Information Protection Commission (PIPC).
Key points
- Online and offline processing rules are unified into a single standard.
- Maximum fines rise to 3% of total revenue.
- New legal bases for international transfers, including equivalence with other regimes.
- Breach notification to data subjects and the PIPC within 72 hours.
Korea holds EU and UK adequacy, but its rules remain among the strictest in the world. UK organisations with Korean customers should review transfer arrangements, security measures and breach procedures.
Source: Personal Information Protection Act (PIPC, Korea)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
