Monitor
Privacy — Korea Regulation Monitor
What changed in Korea's privacy regime.
What changed
- 2026-09-21New Bill Would Add Fines for Destroying Evidence in Korean Privacy Investigations
- 2026-09-21Korea Revises How Privacy Fines Are Calculated — In Force 11 September 2026
- 2026-09-21Korea's PIPA Enforcement Decree Amended: 72-Hour Breach-Possibility Notice and Higher Fines, Effective 11 September 2026
- 2026-09-14Bill Would Elevate PIPA Access-Revocation Duty for Departing Staff to Statute, With Fines for Violation
- 2026-09-14Bill Would Make Breach-Information Sharing Mandatory for Companies with a Registered CISO
- 2026-09-14Korea Bill Would Require Log Retention and Server Preservation After Data Breaches (Network Act Amendment)
- 2026-09-14PIPA Amendment Would Let Companies Reuse Existing Personal Data for AI Development — Subject to PIPC Review
- 2026-08-31Pending PIPA Amendment Would Elevate Data-Handler Access-Rights Duty to Statute, With a Fine Attached
- 2026-08-31Bill Would Add Fines for Downplaying or Falsely Reporting Data Breaches Under PIPA
- 2026-08-31Korea Advances Bill to Strengthen PIPA: Strict Liability for Data Breaches, New Enforcement Powers
- 2026-08-31Korea Considers PIPA Amendment: Reversed Burden of Proof for Breach Damages, New Criminal Penalties for Trading Leaked Data
- 2026-08-31Proposed PIPA Amendment Would Tighten Data-Breach Notification to 'Immediate', Not 'Without Delay'
- 2026-08-31Pending PIPA Amendment: Points and Coupons Would No Longer Count Toward Reducing Data-Breach Damages
- 2026-08-31Pending PIPA Amendment Would Add a 'Consent Decree' Procedure for Data-Breach Investigations
- 2026-08-31Pending PIPA Amendment: PIPC Could Order Mandatory Data-Breach Response Measures
- 2026-08-31PIPA Amendment Bill Advances to Committee Review: Proposed Fines for Refusing Data Requests, Ban on 'Hard-to-Leave' Design
- 2026-08-31Pending PIPA Amendment Would Require Companies to Self-Disclose Data-Breach Sanctions to Affected Users
- 2026-08-31Korea Considers Voluntary Privacy Certification for Data-Processing Products (PIPA Amendment)
- 2026-08-31Bill Would Raise Criminal Penalties for Obstructing PIPC Investigations
- 2026-08-31Pending PIPA Amendment Would Drop Fault Requirement for Statutory Damages, Add Enforcement Fines and an Emergency Suspension Power
- 2026-08-31Korea's PIPA Amendment Clears the National Assembly: New Pathway to Reuse Existing Personal Data for AI Development
- 2026-08-10Bill Would Write Specific Physical-Security Rules Into Korea's Privacy Act
Enforcement log
Enforcement actions and effective dates
- 2026-08Korea's data-protection authority gave advance notice of 2 administrative dispositions under the Personal Information Protection Act, served by public notice.
- 2026-06Korea's data-protection authority served a corrective order under the Personal Information Protection Act by public notice.
- 2026-03Korea's data-protection authority gave advance notice of an administrative disposition under the Personal Information Protection Act, served by public notice.
Rulemaking log
Proposed and adopted rules
- 2026-09Korea's data-protection authority pre-announced an amendment to the PIPA Enforcement Decree.
- 2026-09Korea's data-protection authority pre-announced an amendment to the PIPA Enforcement Decree.
- 2026-06Korea's data-protection authority pre-announced 3 amendments to the PIPA Enforcement Decree.
- 2026-05Korea's data-protection authority pre-announced a new public notice under the Personal Information Protection Act.
- 2026-03Korea's data-protection authority pre-announced an amendment to the PIPA Enforcement Decree.
What we're watching
PIPA — domestic representative
PIPC (Art. 31-2)
≥1M daily Korean users or ₩1T revenue · strengthened Oct 2025
Related Insights
Check your exposure with the free threshold checker.