Cybersecurity Policy Report, South Korea Proposes Expansion of Data Portability Requirements, (Jul 6, 2026)

By Tony Foley

The South Korean Personal Data Protection Commission (PIPC) has proposed amendments to its enforcement framework for the country’s Personal Information Protection Act (PIPA) to apply existing requirements regarding data portability to the education and employment sectors.

The agency outlined its proposal in a press release today, explaining that the right to transfer personal information allows citizens to conveniently utilize their personal information for services they desire. Under the PIPA today, the right to request third-party transfers is available in the medical, telecommunications, and energy sectors, but the PIPC is working to gradually expand these sectors, it said. Once the proposed amendment is approved, the right will be extended to the education and employment sectors, covering academic records, course enrollment, grades, and graduate information managed by universities, as well as information managed by the Korean Employment Information Service.

The amendment also would allow for information on employment and job searches to be transmitted to and used by the institutions of an individual’s choice. Job seekers would no longer be required to obtain and submit their university transcripts or graduation information personally; instead, individuals will be able to use personalized job recommendations or job application services by securely sending a request to an employment service.

Further information on the details of the proposed amendment, which includes provisions to reduce the burden on institutions directly transmitting personal information to individuals by allowing special relay agencies to fulfill a portion of their obligations, are available from the Citizens' Participation in Legislation Center, as well as the PIPC’s website. Interested parties are invited to comment on the proposal through Aug. 10.

News: InternationalLegislation DataPrivacy DataSecurity