Training on the Personal Information Fine Reduction System

The grounds previously used to pursue certifications such as ISMS-P, including penalty reductions, have become even more significant. With the revision of the Enforcement Decree of the Personal Information Protection Act following a series of large-scale personal information breaches involving Coupang, SKT, Lotte Card, and others, an unprecedented system has been introduced that provides a reduction in administrative fines—40% of the 10% of revenue—when a proactive protection system has been established before an incident occurs. Accordingly, a legal basis has now been established through the reduction system for the priority introduction of measures such as inspections of personal information processing systems and the securing of dedicated personal information protection personnel, which had previously been difficult to manage and inspect under the existing Personal Information Protection Act. Therefore, additional items must be reflected in the personal information protection regulations, additional records of personal information protection activities must be prepared, and the time has come to review budgets, including records of the implementation of personal information protection solutions. These measures, scheduled to take effect from the second half of 2026, must be reflected in the personal information management system without delay so that reporting to the CPO can be carried out.