Personal Information Protection Act

PIPA has no express extraterritoriality clause. The Personal Information Protection Commission's Guidelines on Applying PIPA to Foreign Business Operators (Apr 2024) apply the law to foreign operators that provide goods/services to Korean data subjects, process data in a way that directly and substantially affects them (a broad test reaching monitoring/profiling activity), or maintain a place of business in Korea. Art. 58(1) excludes press, missionary/religious, and political-party candidate-nomination processing from most obligations. No general small-business, nonprofit, or sector-specific exemption.