Regulatory Environment
- The Act on Protection of Personal Information (APPI) requires comprehensive privacy notices, with stricter consent for sensitive data.
- 2022 amendments expanded individual rights and increased penalties for non-compliance.
- Direct marketing (email, SMS) requires express opt-in and must offer an easy opt-out.
- No GDPR-style general opt-out for profiling yet, but cross-border data transfers are regulated.