South Korea's top court limits criminal liability for public officials under privacy law
By Wooyoung Lee ( March 25, 2026, 07:36 GMT | Insight) -- South Korea’s top court has narrowly defined who qualifies as a data controller subject to criminal liability under the country’s privacy law, ruling that employees of public institutions fall outside its dual liability provision for misuse of personal data. The ruling points to a potential enforcement gap, as government actors may not face the same criminal penalties that apply to private companies and individuals under the law.South Korea’s top court has narrowly defined who qualifies as a data controller subject to criminal liability under the country’s privacy law, ruling that employees of public institutions fall outside its dual liability provision for misuse of personal data....
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
- Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
- Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
- Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
- Curated case files bringing together news, analysis and source documents in a single timeline
Experience MLex today with a 14-day free trial.