Sejong Law Firm, led by Managing Partner Oh Jong-han, and the American Chamber of Commerce in Korea (AMCHAM Korea) announced on October 27 that they held a seminar on data privacy and cybersecurity on the 24th floor of the Grand Seoul, targeting professionals in the consumer goods and retail sectors.
The seminar was organized in response to recent large-scale data breaches and the tightening of related regulations, aiming to discuss key legal issues and practical response strategies that domestic and international B2C companies should be aware of. The event featured welcoming remarks from Anthony Chang, a foreign attorney and co-chair of AMCHAM's Consumer Goods and Retail Committee, followed by opening remarks from Managing Partner Kang Shin-wook, and included three presentations and a Q&A session.
The first presentation was delivered by Sejong's Senior Counsel Choi Kwang-hee, who discussed 'Recent Trends in Domestic Cyber Attacks and Related Regulatory Issues.' He explained the acceleration of cyber attacks due to advancements in AI technology and the increasing trend of data breaches in South Korea. He highlighted the importance of initial responses, such as evidence preservation and prompt reporting, particularly given the country's geopolitical environment and critical industrial technologies that pose cybersecurity threats. He also emphasized the need for companies to enhance their preemptive response capabilities through internal inspections and scenario-based drills that align with government investigation methods.
Next, attorney Ahn Jung-ho (Class of 38, head of the Privacy and Data Team) presented on 'Key Considerations in Responding to Data Breaches.' He analyzed changes in the domestic regulatory environment following recent large-scale breaches, focusing on the amended Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection. He explained key legal issues, including expanded obligations for breach reporting and notification, changes in investigation procedures, increased responsibilities for management regarding information protection, and the introduction of punitive fines. He stressed that swift and appropriate responses during incidents could influence the reduction of fines, thus highlighting the importance of reviewing legal obligations and internal response systems in advance.
The final presentation was given by attorney Yoon Ho-sang (5th Bar Exam), who addressed 'Key Issues Under Korean Data Protection Law for B2C Companies.' He explained the extraterritorial application criteria of domestic data protection laws and the legal requirements for data processing. He introduced regulatory considerations for global B2C companies, including the distinction between third-party data sharing and processing delegation, as well as compliance requirements for data transfers abroad, supported by actual enforcement cases. He also discussed practical considerations stemming from differences in domestic and international legal systems, including the roles of data protection officers and domestic agents, and measures to ensure data security.
During the Q&A session, discussions centered on the effectiveness of the strengthened fine system and initial response strategies for data breaches. Questions arose regarding how to secure accuracy in reporting and the timeline for notifications when the extent of a breach is unclear. The presenters emphasized the importance of consistent responses, prioritizing the reporting of confirmed facts within legal deadlines while supplementing additional verification as needed.
Kang Shin-wook, Managing Partner of Sejong's ICT Group, stated, "Data privacy and cybersecurity have evolved from mere operational tasks to critical management risks that shape the future of companies. What matters is how effectively we prepare in advance and how quickly and precisely we can respond in times of crisis." He expressed hope that the seminar would serve as an opportunity for domestic and international B2C companies to assess the legal risks they face in a rapidly changing regulatory environment and explore practical response strategies.
Sejong provides specialized legal advice in the areas of data protection, information security, and cyber incident response, and plans to continue sharing updates on relevant legal trends and practical response strategies to help domestic and international companies effectively navigate the evolving regulatory landscape.
* This article has been translated by AI.
Copyright ⓒ Aju Press All rights reserved.