The Korea Times close
National
  • Politics
  • Foreign Affairs
  • Multicultural Community
  • Defense
  • Environment & Animals
  • Law & Crime
  • Society
  • Health & Science
Business
  • Tech
  • Bio
  • Companies
Finance
  • Companies
  • Economy
  • Markets
Opinion
  • Editorial
  • Columns
  • Thoughts of the Times
  • Cartoon
  • Today in History
  • Blogs
  • Tribune Service
  • Blondie & Garfield
  • Letter to President
  • Letter to the Editor
Lifestyle
  • Travel & Food
  • Trends
  • People & Events
  • Books
  • Around Town
  • Fortune Telling
Entertainment
& Arts
  • K-pop
  • Films
  • Shows & Dramas
  • Music
  • Theater & Others
Sports
World
  • SCMP
  • Asia
Video
  • Culture
  • People
  • News
Photos
  • Photo News
  • Darkroom
  • The Korea Times
  • search
  • Site Map
  • E-paper
  • Subscribe
  • Register
  • LogIn
search close
  • The Korea Times
  • search
  • Site Map
  • E-paper
  • Subscribe
  • Register
  • LogIn
search close
Opinion
  • Editorial
  • Columns
  • Thoughts of the Times
  • Cartoon
  • Today in History
  • Blogs
  • Tribune Service
  • Blondie & Garfield
  • Letter to President
  • Letter to the Editor
Thu, May 26, 2022 | 20:49
New Technologies & The Law
Many differences between Korean, EU data protection laws
Posted : 2018-06-30 10:04
Updated : 2018-06-30 23:21
Print Preview
Font Size Up
Font Size Down
Companies should be aware of the data protection laws that apply in the EU and South Korea. Reuters
Companies should be aware of the data protection laws that apply in the EU and South Korea. Reuters

By Shon Ga-ram

Companies should be aware of the data protection laws that apply in the EU and South Korea. Reuters
The European Union's General Data Protection Regulation (GDPR) came into effect on May 25, 2018. The purpose of this law is to regulate the storage, processing and transfer of the personal data of individuals living in the EU, but it also affects companies outside the EU who have anything to do with the data of EU residents, which is why it is relevant to Korean businesses.

The article will discuss the differences between the Korean Personal Information Protection Act (PIPA) and the GDPR. First of all, companies subject to the GDPR must designate agents within the EU, unlike the PIPA, which does not require foreign companies to designate agents in Korea.

Under the PIPA, employers are required to nominate a data protection officer (DPO) among authorized employees, such as company representatives or executives, whereas GDPR allows for external DPOs or joint DPOs.

Regarding the rights of a data subject (any person whose data or information is stored or processed by a company), the PIPA guarantees the right of access, correction and deletion. In addition to these rights, the GDPR prescribes the right to limit personal information processing, the right to transfer personal information to other companies, the right to be forgotten (deleted from storage) and the right to refuse profiling.

If a company wishes to transfer personal information in its possession to a location outside of its legal jurisdiction, the PIPA asks that company to obtain agreement from data subjects for transferring his or her information. The GDPR, on the other hand, allows the transfer of personal information to an overseas country even without the data subject's approval, as long as there is an adequacy decision or appropriate safeguards.

In terms of detailed procedures, differences exist between the PIPA and the GDPR. While the PIPA requires only public institutions to receive an impact assessment, the GDPR also requires private companies that handle large-scale information to do so.

In case of personal information leakage, a company must inform the data subject about the leakage before notifying the relevant authority, according to the PIPA. However, under the GDPR, a company must notify the relevant authority first and then notify the data subject. Finally the company may be subject to a fine of up to about 40,000 euro under the PIPA, whereas the GDPR may impose a fine of up to 20 million euro.

The terms of the GDPR and the PIPA differ. However, it is yet unclear how strictly the GDPR will be applied to companies. Companies that are subject to the GDPR, such as those that have business sites in the EU or provide goods or services to EU residents, should carefully monitor specific regulatory examples or interpretations of regulatory bodies.

Shon Ga-ram has been a member of the Corporate & Finance Practice Group at HMP Law since 2016. He specializes in personal information protection, corporate governance, finance, litigation, tax, etc.


Emailjacco@hmplaw.com Article ListMore articles by this reporter
 
  • Gunman kills 18 children at Texas elementary school
  • Korea to allow visa waiver at Yangyang airport for int'l travelers from 4 countries
  • Over 76% of Koreans support legalizing euthanasia
  • Will government establish new immigration agency?
  • North Korea launches missiles to test Seoul-Washington deterrence
  • N. Korea fires 3 ballistic missiles, including 1 suspected ICBM: JCS
  • [INTERVIEW] Defender of inter-country adoptees' rights
  • Japan's unwelcome move
  • Auditing firms compete to secure rookie accountants
  • US forces anger animal rights group for brutally executing stray cats with air gun
  • Former GFriend member Yuju sings on track for drama 'Kiss Sixth Sense' Former GFriend member Yuju sings on track for drama 'Kiss Sixth Sense'
  • 'The Witch: Part 2' director still has more story to tell 'The Witch: Part 2' director still has more story to tell
  • Tim Burton's iconic world of misunderstood misfits returns to Korea Tim Burton's iconic world of misunderstood misfits returns to Korea
  • Park Chan-wook returns to Cannes with romance 'Decision to Leave' Park Chan-wook returns to Cannes with romance 'Decision to Leave'
  • BLACKPINK on cover of Rolling Stone BLACKPINK on cover of Rolling Stone
DARKROOM
  • 75th Cannes Film Festival

    75th Cannes Film Festival

  • People in North Korea trapped in famine and pandemic

    People in North Korea trapped in famine and pandemic

  • 2022 Pulitzer Prize: Bearing witness to history

    2022 Pulitzer Prize: Bearing witness to history

  • Worsening drought puts millions at risk

    Worsening drought puts millions at risk

  • Our children deserve the best

    Our children deserve the best

The Korea Times
CEO & Publisher : Oh Young-jin
Digital News Email : webmaster@koreatimes.co.kr
Tel : 02-724-2114
Online newspaper registration No : 서울,아52844
Date of registration : 2020.02.05
Masthead : The Korea Times
Copyright © koreatimes.co.kr. All rights reserved.
  • About Us
  • Introduction
  • History
  • Location
  • Media Kit
  • Contact Us
  • Products & Service
  • Subscribe
  • E-paper
  • Mobile Service
  • RSS Service
  • Content Sales
  • Policy
  • Privacy Statement
  • Terms of Service
  • 고충처리인
  • Youth Protection Policy
  • Code of Ethics
  • Copyright Policy
  • Family Site
  • Hankook Ilbo
  • Dongwha Group