Korean Politician Proposes Stricter Biometric Data Protection Laws, Affecting Tech and Entertainment Sectors

A new amendment to South Korea’s Personal Information Protection Act (PIPA) has been proposed by Representative Lee Soo Jin, aiming to enhance regulations governing biometric data collection and usage. The proposal would expand the scope of protected biometric information to include fingerprints, facial recognition data, iris scans, and palm vein patterns.

The amendment introduces stricter controls on private companies’ ability to collect biometric data without authorization. Organizations in entertainment, ticketing, and financial technology sectors would face new limitations on data collection practices. Companies would need to obtain explicit consent before collecting or processing biometric information, and usage would be restricted to specific, pre-disclosed purposes.

This legislative proposal follows several recent updates to South Korea’s privacy framework. In 2020, PIPA underwent significant revisions that introduced concepts like pseudonymized information and expanded the Personal Information Protection Commission’s authority. Additional amendments implemented in March 2024 established new rights related to automated decision-making and artificial intelligence.

The proposed changes would significantly impact multiple industries. Technology companies using biometric authentication would need to modify their data collection protocols. Entertainment firms like HYBE, which recently launched its Face Pass facial recognition system for concert entry, may need to adjust their biometric verification practices. Financial technology services, including those offered by South Korean cybersecurity firm RaonSecure, would require enhanced consent mechanisms.

The transportation sector would also face new compliance requirements. Korean Air’s recent implementation of palm vein scanning for domestic flight boarding at Gimpo International Airport would need to align with the stricter data protection standards. Event management companies like Interpark, which has integrated biometric verification into their ticketing systems, would need to revise their entry procedures.

The amendment is currently under legislative review. It aligns with South Korea’s broader initiative to strengthen data protection measures in response to emerging technologies, particularly as the country sees increased adoption of biometric authentication across public and private sectors. At the same time, it could upend a number of biometric efficiencies that have already been put in place by various organizations.

Sources: Allkpop, Koreaboo

–

January 17, 2025 – by Ali Nassar-Smith