South Korea will shift its personal data protection regime toward prevention, requiring regular inspections from the second half of the year for about 1,700 high-risk systems handling large volumes of data. The Personal Information Protection Commission plans punitive fines of up to 10 percent of sales for repeated or serious violations and will tighten fine calculation standards. It will also expand supply-chain checks, institutionalise Privacy by Design, bolster public-sector staffing and budgets, and step up enforcement against illegal distribution of leaked sensitive data.

Global breach containment company Illumio said zero trust is becoming more important in the AI era and argued the focus should shift from prevention and detection to isolation. It urged companies to make microsegmentation central to zero-trust strategy to gain visibility into attackers\' paths, identify lateral movement and stop breach spread. Illumio shared its Korea market plans and platform components and highlighted government moves such as N2SF, KISA zero-trust guidelines 2.0 and tougher privacy law penalties.