Kim Chang Lee is intimately familiar with the regulatory and enforcement environment in data protection and privacy matters and closely tracks new developments and regulatory trends in this area. We regularly advise clients on sensitive issues under the Personal Information Protection Act, the Credit Information Use and Protection Act and the Act on the Protection and Use of Location Information, among others. As compliance with data privacy law has become a paramount concern to all companies operating in Korea, we provide practical legal advice to clients on protection of personal data in various private and public sectors, such as financial institutions, fintech companies and public agencies, to help them mitigate and manage risks associated with data security issues. Based on our expertise in both domestic and overseas personal data regulatory regimes, we conduct assessment of data protection and privacy risks, provide compliance counseling and assist multinational companies to safely operate their businesses in Korea in compliance with Korea’s highly developed data protection and privacy laws and regulations.

• Advisory on processing of transaction data of domestic data subjects and customer stores for a Chinese fintech company
• Advisory on entry into the Korean market and processing of transaction data of domestic data subjects for a foreign fintech company
• Advisory on protection of personal data of customers for a foreign financial institution
• Drafting of a manual on processing of personal data and establishment of a personal data processing system for a foreign investment immigration center
• Advisory on access to customer data during due diligence phase of M&A transactions
• Advisory on compliance issues related to protection of personal data during transfer for a domestic franchiser
• Advisory on protection of personal data related to welfare programs for a government agency
• Advisory on establishment and maintenance of personal data protection systems for large domestic and foreign corporates
• Advisory on protection, collection and overseas transfer of personal data for domestic and foreign due diligence service providers