| Mobile Web

PIPC to issue advance notice of amended enforcement decree to improve ISMS-P audit process

South Korea’s Personal Information Protection Commission will issue an advance legislative notice from Sept. 16 to Oct. 26 on a draft amendment to the enforcement decree of the Personal Information Protection Act to strengthen the effectiveness of ISMS-P certification. The draft allows combined document and on-site audits, enables qualified technical staff to conduct vulnerability checks using tools after incidents, and applies similar measures to annual follow-up reviews. It also proposes a one-year grace period on fines after certification cancellation.