South Korea Strengthens Security Measures For Personal Information

South Korea’s Ministry of Government Administration and Home Affairs issued an amended version of the Standards of Personal Information Security Measures (the ‘Standards’). These Standards seek to close loopholes and inadequacies in the South Korean data protection law, and to counter the growing number of data breaches, especially those arising from use of mobile devices.

The Standards apply to all data handlers (a concept similar to data controllers under the EU Data Protection Directive) and are designed to prevent the loss, theft, leakage or falsification of personal information. The amended version sets out extensive requirements, increases obligations on data handlers when outsourcing processing, and introduces new security measures for mobile devices.