
The Personal Information Protection Commission announced on the 2nd that it will concentrate its investigative resources by forming dedicated investigation teams and handling important cases intensively, particularly those involving large-scale damage or significant social impact.
According to the Personal Information Protection Commission, important cases refer to incidents where data is leaked for more than 1 million people, cases raising concerns about public interest, and hacking of major public systems. The commission plans to form an on-site response team immediately upon the occurrence of an incident to identify affected systems and preserve related evidence. It will also simultaneously review measures for notifying individuals of personal information leaks and preventing further spread of damage, ensuring that investigation and damage prevention are carried out concurrently.
For general cases, the commission plans to classify similar or identical incidents based on their characteristics, standardize violation behaviors and sanction criteria, and process them in a linked and batch manner. For minor cases, it will shift to a post-incident management system focused on improving accident causes and preventing recurrence through measures such as waiving initial administrative fines for small and medium-sized enterprises and micro-businesses, and providing technical support.
The Personal Information Protection Commission also plans to cultivate specialized investigators through customized training by field and strengthening basic education for new investigators. To address work disruptions caused by rotational assignments, it will designate core investigators as specialist officers to ensure continuity of operations and expertise.
In addition, the commission plans to support productivity improvements in investigative work by sharing and providing materials necessary during investigations through systems such as the reporting management system, investigation information system, and forensic lab.
Personal Information Protection Commission Chairman Song Kyung-hee stated, "As personal information leak and infringement incidents surge and large-scale, complex cases increase, it is necessary to allocate investigative resources according to the importance and characteristics of each case, rather than handling all cases in the same manner."
She added, "We will build an investigation system that possesses not only speed but also fairness and transparency by investing sufficient investigative resources in important cases, processing general and minor cases swiftly while operating the process more clearly and predictably, and transparently disclosing the results."