Data Protection Laws of the World Handbook: Second Edition
"In the past, South Korea did not have a comprehensive law governing data privacy. However, a new law relating to protection of personal information (Personal Information Protection Act, ""PIPA"") was enacted and became effective as of 30 September 2011. Under PIPA, except as otherwise provided for in any other Act, the protection of personal information shall be governed by the provisions of PIPA. If a breach of Personal Data occurs the Data Handler must notify the data subjects without delay of the details and circumstances, and the remedial steps planned. Non-compliance with a request or violation of an order can result in fines, imprisonment, or both."