This issue tracks South Korea's legal and regulatory response to repeated large-scale personal data breaches. Reforms led by the Personal Information Protection Commission introduced the possibility of penalties of up to 10 percent of total revenue for certain repeated, intentional or grossly negligent serious privacy violations, while also providing incentives for preventive security investment and strengthening the responsibilities of corporate executives and privacy officers as well as notification and victim-remedy mechanisms.
3 events · 4 sources · Updated 12 days ago
South Korea promulgated amendments to its personal data protection law following a series of large-scale data breaches. The law allows penalties of up to 10 percent of total revenue for certain repeated or serious violations caused intentionally or through gross negligence and strengthens the regulatory and preventive framework overseen by the Personal Information Protection Commission.
The Personal Information Protection Commission announced that amended privacy legislation, enforcement regulations and related rules would take effect on September 11. The framework includes penalties of up to 10 percent of total revenue for qualifying serious breaches, reductions linked to preventive security investment, stronger accountability for senior management and privacy officers, and a new notification mechanism for potential data exposure.
최근 금융회사와 공공기관의 개인정보 유출 사고가 이어지자 대통령이 금융권 전반에 대한 조사와 보안대책 강화를 지시했다.