South Korea
Personal Information Protection Act (PIPA)
South Korea's PIPA is one of Asia's strictest data protection laws. Biometric data including facial recognition data is classified as sensitive information requiring separate, explicit consent. The 2023 amendments strengthened individual rights, added data portability, and introduced rules for automated decision-making. South Korea has an EU adequacy decision, reflecting its high data protection standards.
Key Provisions
- Biometric data is sensitive information requiring separate explicit consent
- Processing must have a lawful basis and specific purpose
- 2023 amendments added right to data portability and automated decision-making rules
- Mandatory data protection impact assessments for large-scale biometric processing
- Cross-border transfers require adequate protections or specific consent
- EU adequacy decision confirms South Korea's high protection standards
Your Biometric Rights
- Right to consent before collection of sensitive (biometric) information
- Right to access personal information
- Right to correction and deletion
- Right to suspend processing
- Right to data portability (2023 amendment)
- Right to explanation of automated decisions (2023 amendment)
Penalties for Non-Compliance
Up to 3% of related revenue or KRW 2 billion (~$1.5M USD). Criminal penalties: up to 5 years imprisonment or KRW 50 million fine. PIPC can issue corrective orders, suspend business, and publicize violations.
Our Removal Process
We submit deletion and suspension requests under PIPA. South Korean law provides strong enforcement with criminal penalties for non-compliance, making removal requests particularly effective. We monitor compliance within statutory timeframes.
Get Protected