Personal Information Protection Commission

Press Release

The PIPC to Help Support the Public Sector to Raise the Level of Personal Information Protection 

- The PIPC will hold online and offline briefing sessions on the Assessment of the Status of Personal Information Protection in the Public Sector and provide on-site consultations

June 16, 2026

(This is an unofficial translation of a press release, originally prepared in Korean.)

The Personal Information Protection Commission (PIPC) announced that it will hold online and offline briefing sessions in June 2026, following the publication of the Handbook on the Assessment of the Status of Personal Information Protection in the Public Sector in May. It is part of the Action Plan for the Assessment of the Status of Personal Information Protection in the Public Sector, finalized on April 8, 2026.

The Assessment of the Status of Personal Information Protection in the Public Sector (Assessment) has been carried out pursuant to Article 11-2 of the Personal Information Protection Act (PIPA) since 2024 to comprehensively assess public-sector personal information protection efforts, including their compliance with legal obligations and the adequacy and effectiveness of their data processing practices. 

Through the briefings, the PIPC aims to help institutions subject to the assessment better understand the assessment process and prepare more effectively. Online briefings were held in two sessions on June 16 and 17, followed by an in-person briefing scheduled on June 25, 2026.

The in-person briefing will consist of two sessions. The first session will provide an overview of the protection level assessment plan and procedures, introduce best practices, and include a Q&A session. The second session will explain the PIPC’s Plan to Shift to a Prevention-Focused Personal Information Management Framework.

Session 1: Overview of the revised and strengthened Assessment framework, including:

• Stricter sanctions for data breaches and insufficient countermeasures 
• More proactive and preventive measures against cyber threats, including hacking 
• Enhanced assessment criteria to verify the status of personal information protection in practice

Session 2: Briefing the PIPC’s plan to shift toward a prevention-focused personal information management framework, including:

• Strengthening the expertise of Chief Privacy Officers (CPOs) 
• Expanding mandatory ISMS-P certification requirements 
• Increasing dedicated personnel and budgets for privacy protection

Following the briefings, the PIPC will kickstart providing on-site support from July 2026. Regional consulting sessions will be held in three regions—Gangwon, Gyeongnam, and Jeonnam Provinces—to directly identify and address challenges faced by public institutions. In addition, the PIPC plans to provide tailored consultations through expert visits to help them voluntarily identify and improve security vulnerabilities.

Director-General Nak-joon Ko of the Prevention and Coordination Bureau said, “Amid a series of recent data breaches in the public sector, the need for a secure and systematic management of personal information has become more important than ever.” He added, “The PIPC will continue to provide support, including briefings and on-site consultations, to strengthen privacy protection capabilities of public institutions and contribute to building public trust.” 

* A PDF file, formatted for better readability, is attached.