South Korea
Personal Information Protection Act (PIPA)
South Korea's PIPA is one of Asia's strictest data protection laws. Biometric data including facial recognition data is classified as sensitive information requiring separate, explicit consent. The 2023 amendments strengthened individual rights, added data portability, and introduced rules for automated decision-making. South Korea has an EU adequacy decision, reflecting its high data protection standards.
Key Provisions
- Biometric data is sensitive information requiring separate explicit consent
- Processing must have a lawful basis and specific purpose
- 2023 amendments added right to data portability and automated decision-making rules
- Mandatory data protection impact assessments for large-scale biometric processing
- Cross-border transfers require adequate protections or specific consent
- EU adequacy decision confirms South Korea's high protection standards
Your Biometric Rights
- Right to consent before collection of sensitive (biometric) information
- Right to access personal information
- Right to correction and deletion
- Right to suspend processing
- Right to data portability (2023 amendment)
- Right to explanation of automated decisions (2023 amendment)
Penalties for Non-Compliance
Up to 3% of related revenue or KRW 2 billion (~$1.5M USD). Criminal penalties: up to 5 years imprisonment or KRW 50 million fine. PIPC can issue corrective orders, suspend business, and publicize violations.
What We Do Here
We file opt-out requests on your behalf with the face search engines we support, and re-file as necessary. PIPA gives residents of South Korea the right to have their personal data deleted or its processing suspended. We file through each engine's own opt-out process rather than under PIPA, and a complaint to the Personal Information Protection Commission is yours to make.
Get Protected