skip to main contents skip to main menu

Government Legislation

  • [IT & IPR] Revised Enforcement Decree of the Personal Information Protection Act
    • Competent Ministry : Personal Information Protection Commission
    • Advance Publication of Legislation :
    • Opinion Submission Deadline :

[Background and Necessity]
Article 35-2 of the law broadly guarantees the scope of the data subject’s request for data transfer, distinguishing it from third-party data transfer requests. 

However, the current enforcement decree aligns both, necessitating an expansion of the scope of the data subject’s request for data transfer in order to ensure the protection of the data subject's rights.


[Regulatory Content]
The scope of the data subject’s data transfer request is expanded to include personal data handlers with a certain level of data processing capabilities, regardless of the industry, 

and to include all information about data subjects who meet the legal requirements.

Regulatory effect assessment
  • 개인정보 보호법 시행령(규제영향분석서)_20250620.hwp [download]
Legislative proposal (draft)
  • 1. 개인정보보호위원회공고제2025-50호(개인정보 보호법 시행령 일부개정령(안) 입법예고).hwpx [download]