( May 22, 2026, 05:27 GMT | Official Statement) -- MLex Summary: South Korea’s privacy regulator will classify businesses and public institutions into three tiers of privacy risk — high, medium and low — based on the scale and sensitivity of the personal data they process. The Personal Information Protection Commission said Friday that it will conduct regular inspections of organizations classified as high risk to assess their internal control systems. In 2026, platforms, banks, insurers, credit card companies and brokerages, as well as public institutions, edutech services and long-term care hospitals are designated as high risk and subject to enhanced inspections. The statement and details are attached (in Korean)....
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
- Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
- Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
- Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
- Curated case files bringing together news, analysis and source documents in a single timeline
Experience MLex today with a 14-day free trial.