"Government relaxes period for reporting leaks = Within 30 days in principle, certified companies are the target," 27 June 2024

[Unofficial description by Business & Human Rights Resource Centre]

The government is considering extending the requirement to report personal data leaks within about five days to within 30 days. The private sector has called for a reduction in the burden.

The relaxation of reporting obligations will only apply to companies that have been confirmed as certified personal information protectors by industry associations, and the obligation to notify individuals will remain the same.