country: South Korea
framework: PIPA
region: Asia
language: ko
version: 2023-03
status: published
last_updated: 2025-06-30
source_verified: true
authority: Personal Information Protection Commission (PIPC)
notes:
- PIPA applies to both public and private entities and contains comprehensive rules for the collection,
  use, and transfer of personal and sensitive information.
- Sensitive information under Article 23 includes ideology, health, genetic, sexual life, and criminal
  records, requiring separate and explicit consent.
- Recent amendments introduced stronger cross-border restrictions and new data subject rights.
categories:
- name: Full Name
  type: direct_identifier
  required_masking: true
  tags:
  - pii
  citations:
  - regulation: PIPA
    article: Article 2(1) – Definition of Personal Information
- name: Resident Registration Number (RRN)
  type: direct_identifier
  required_masking: true
  tags:
  - pii
  - sensitive
  citations:
  - regulation: PIPA
    article: Article 24
- name: Passport or National ID Number
  type: direct_identifier
  required_masking: true
  tags:
  - pii
  citations:
  - regulation: PIPA
    article: Article 2(1)
- name: Address
  type: quasi_identifier
  subtype: address
  required_masking: true
  tags:
  - pii
  citations:
  - regulation: PIPA
    article: Article 2(1)
- name: Phone Number
  type: direct_identifier
  required_masking: true
  tags:
  - pii
  citations:
  - regulation: PIPA
    article: Article 2(1)
- name: Email Address
  type: direct_identifier
  required_masking: true
  tags:
  - pii
  citations:
  - regulation: PIPA
    article: Article 2(1)
- name: Biometric Data (e.g., fingerprints, facial image)
  type: special_category
  subtype: biometric
  required_masking: true
  tags:
  - biometric
  - sensitive
  citations:
  - regulation: PIPA
    article: Article 23(1)
- name: Health and Medical Information
  type: special_category
  subtype: medical
  required_masking: true
  tags:
  - phi
  - sensitive
  citations:
  - regulation: PIPA
    article: Article 23(1)
- name: Sexual Orientation or Sexual Life
  type: special_category
  required_masking: true
  tags:
  - sensitive
  citations:
  - regulation: PIPA
    article: Article 23(1)
- name: Criminal Record or History
  type: special_category
  required_masking: true
  tags:
  - sensitive
  citations:
  - regulation: PIPA
    article: Article 23(1)
- name: Political or Ideological Beliefs
  type: special_category
  required_masking: true
  tags:
  - sensitive
  citations:
  - regulation: PIPA
    article: Article 23(1)
- name: Genetic Information
  type: special_category
  required_masking: true
  tags:
  - sensitive
  citations:
  - regulation: PIPA
    article: Article 23(1)
- name: IP Address and Online Identifiers
  type: quasi_identifier
  required_masking: true
  tags:
  - tracking
  - pii
  citations:
  - regulation: PIPA
    article: Article 2(1)
- name: Employment Information
  type: quasi_identifier
  subtype: employment
  required_masking: true
  tags:
  - pii
  citations:
  - regulation: PIPA
    article: Article 2(1)
- name: Minor or Child Data (under 14)
  type: special_category
  required_masking: true
  tags:
  - child
  - sensitive
  citations:
  - regulation: PIPA
    article: Article 39-3