South Korea’s Personal Information Protection Commission (PIPC) just rolled out tougher rules to punish major personal data leaks—especially the kind caused by intentional action or serious negligence. Under the latest amendments to the Personal Information Protection Act, if a company leaks personal info for 10 million+ people, the maximum fine can hit a staggering amount: up to 10% of the company’s annual revenue. That’s a big deterrent shift. PIPC chair Kyung-Hee Song announced the changes on Sept. 9, and they take effect on Sept. 11. The update tightens penalties for “repeated” breaches and ramps up executive accountability—specifically requiring the CEO’s management and supervision responsibility to be written into the system. Companies are also expected to secure ISMS-P (Information Security Management System—Privacy) to prove their security capability. On top of that, ransomware-related gaps are being closed: in major breach cases, companies must notify users within 72 hours even if data exfiltration can’t be fully proven, and they must provide remediation info (e.g., compensation channels or dispute resolution options). Compliance is now about prevention + governance + rapid response. #CyberSecurity #DataPrivacy #Compliance #Korea #PIPC #RiskManagement
Want to learn more? Visit Explore the world, stay updated on travel insights and international affairs, and discover authentic stories from real life
评论
发表评论