Today: Thursday, 3 October 2024 year

South Korean companies were allowed to collect personal data from customers.

South Korean companies were allowed to collect personal data from customers.

A new law allowing companies to collect some of users’ personal data without their consent if it is necessary to provide services will come into force in South Korea on Sunday, the Personal Information Protection Commission reports.

The new law on the protection of personal data will come into force on September 15. Online companies are now required to obtain user consent before collecting personal information necessary to provide services, with refusal potentially resulting in the service being unavailable.

Under the updated regulation, companies will no longer be required to obtain user consent to collect personal information needed to provide services or enter into contracts, although explicit consent will still be required for sensitive personal data.


Information that may be collected without consent includes addresses and telephone numbers of users that are necessary for the delivery of products ordered.

The commission said it would distribute booklets explaining the new decree to companies to prevent confusion about the new rules.