Privacy & Information Security Law Blog

On October 27, 2013, the South Korean Ministry of Security and Public Administration indicated that the government will issue certifications to private and public organizations that meet certain requirements of the Personal Information Protection Act. According to The Korea Times, organizations will be able to apply for the certification with the National Information Society Agency (“NISA”) beginning on November 28, 2013. The number of requirements that an organization will be assessed against will depend on the size of the organization. The Korea Times reports that NISA “will take a close look at the firms’ privacy protection policies and what kinds of efforts they have in place to prevent leaks of private information of their clients.” Once issued, the certification will be valid for three years and renewable.