“Consolidated Guidelines on Personal Information Processing” Released by the PIPC
2025.08.12.
On July 15, 2025, the Personal Information Protection Commission (the “PIPC”) published the “Consolidated Guidelines on Personal Information Processing” (the “Guideline”). The initial draft of the Guideline was first released in December 2024, which provided an integrated explanation of the revamped personal information processing framework adopted by the 2023 amendment of the Personal Information Protection Act (the “PIPA”). After public consultation and revision of the draft over a seven-month period, the final version of the Guideline was published on July 15, 2025.
This Guideline has been prepared to integrate and consolidate the amendments made to the PIPA after 2023, which were not reflected in the previously published “Interpretive Guideline to the Personal Information Protection Act and Related Regulations” (December 2020). Accordingly, the following documents, which were published prior to the amendment of the PIPA and previously in use, have been repealed: “Easy Guide to Consent on Personal Data Processing” (March 2022), the “Guidelines on Outsourced Processing” (December 2020), the “Guidelines on Security Safeguards” (December 2020), and the “Guidelines on Automatically Processed Personal Data” (December 2020).
In this Legal Update we will introduce the key takeaways of the Guideline, focusing on the notable changes from the previous guidelines, particularly those that require particular attention from personal data controllers.
[Korean version] 개인정보보호위원회의 개인정보 처리 통합 안내서 발간과 시사점
.jpg)
.jpg.jpg)
.jpg)
