🇰🇷 South Korea · Privacy & Data Protection
Data-protection regime (GDPR/CCPA/PIPL and local laws), registration duties, and the official supervisory authority.
South Korea's Personal Information Protection Act (PIPA) is one of the strictest privacy regimes in Asia, enforced by the Personal Information Protection Commission (PIPC). Organisations generally need consent or another legal ground to process personal data, must protect it, honour data-subject rights, and report breaches to the PIPC and affected individuals.
- Generally obtain consent or another legal ground to process personal data under PIPA.
- Protect personal data and honour data-subject rights.
- Report data breaches to the PIPC and affected individuals; penalties can be significant.
Official authorities
- Personal Information Protection Commission (PIPC)
Official Korean data-protection authority.
Official-information aggregation, not legal advice. Always verify on the authority's own site.
Government portals
- Government of Korea — Korea's integrated government portal — policy, administrative services, e-government
- Korea Immigration Service (HiKorea) — Visas, residence status changes, work permits, and alien registration in Korea
- National Tax Service (NTS) — Korean income tax, corporate tax, VAT filing; annual comprehensive tax return for foreigners (May); foreign taxpayer incentive lookup