South Korea’s data privacy law has evolved rapidly despite a short history of relevant legislation and enforcement. South Korea’s data privacy law has exceedingly stringent consent requirements. In addition to consent, there are many other statutory provisions with onerous requirements, arguably making the overall data privacy law regime one of the strictest in the world. South Korea’s data privacy law, in particular the Personal Information Protection Act, has a similar structure to the EU’s data privacy law. However, the overall legal regime and enforcement mechanisms for data privacy reveal South Korea’s unique characteristics and the weaknesses of its data privacy law. Both the governance regime and the enforcement powers are too fragmented to achieve consistent policy outcomes. Data privacy has gained greater public attention in recent years in South Korea and, perhaps reflecting this phenomenon, relevant laws and regulations have been amended frequently. A notable trend is to strengthen penalty provisions such as the maximum amount of administrative fine, now set at 3% of relevant sales revenue. It remains to be seen if heightened penalty provisions will meaningfully help to address data privacy concerns.

中文翻译：

---

韩国数据隐私法的结构和执行

尽管相关立法和执法的历史很短，但韩国的数据隐私法发展迅速。韩国的数据隐私法有极其严格的同意要求。除了同意之外，还有许多其他具有繁重要求的法定条款，可以说使整体数据隐私法律制度成为世界上最严格的制度之一。韩国的数据隐私法，尤其是《个人信息保护法》，与欧盟的数据隐私法具有相似的结构。然而，数据隐私的整体法律制度和执法机制揭示了韩国的独特特征和数据隐私法的弱点。治理制度和执法权力都过于分散，无法实现一致的政策结果。近年来，数据隐私在韩国受到了越来越多的公众关注，可能反映了这一现象，相关法律法规的频繁修订。一个显着的趋势是加强处罚规定，例如最高行政罚款金额，现在定为相关销售收入的 3%。加重处罚条款是否有助于解决数据隐私问题还有待观察。