Personal Information Audit 2

Following the Personal Information Audit 1 training, internal privacy officers have made insufficient progress in improving their work. They continue to perform their duties as they did last year, resulting in ongoing failures to prevent and stop incidents in advance due to negligence. Executives—including the CEO, CPO, division heads, and department heads—have insufficient understanding of personal information protection. As a result, the Privacy Protection Team has not provided adequate in-house training or communication on key points. As the department responsible for personal information, the Privacy Team continues to rely solely on checklists for accurate legal assessments and inspections. Checklists based only on the minimum requirements under the law leave many blind spots, and this issue needs to be addressed. Training on accurate and authoritative knowledge is needed, as inspections must be based on precise case law and enforcement actions.