When this applies
When this applies
Procedure
Procedure
- Notification Difficulty Low
You submit the statutory report form and required documents. Once the documents are in order the report is accepted; for some reports the authority checks the contents before accepting it.
- Appeal Difficulty High
Submitting an opinion, objection or administrative appeal against a disposition or decision already made, or applying for damage relief or dispute mediation. The reviewing body decides after examining the facts and the law, so preparing supporting evidence is important.
We will prepare the business's personal information leak notification/report form and the victim's dispute mediation application form. We will distinguish between procedures appropriate for the status of the client, either business or victim.
Scope & fee
- Prepare business data-breach notice and report documents
- We will organize the leak recognition, target, items, and response records of 1 business operator and prepare a information subject notice and leak report. It does not include information system technical investigation and recovery and operation of a permanent personal information management system. It does not include in-office submissions.
- Official fee source ↗
- Personal data subject dispute mediation application for 1 person
- We will compile the personal information victim data and demands of 1 victim information subject and prepare the dispute mediation application documents. It does not include statements from business leak reports, technical investigations, or coordination meetings. It does not include in-office submissions.
- Official fee source ↗
- 01
Record when and how the incident was discovered: Immediately record the time the leak or unlawful access was first discovered, who confirmed it, and the leaked items and number of people. The 72-hour period for notification and reporting runs from the time the controller became aware of the leak.
- 02
Draft the notice to data subjects: Include every item listed in Article 34(1) of the Act and notify in writing or by similar means. If the leaked items or circumstances are not yet confirmed, first notify what has been confirmed and send further notice as soon as more is confirmed; if contact details are unknown, posting the notice on the website or at the business premises for at least 30 days may replace individual notice.
- 03
Check whether a leak report is required and file it: If 1,000 or more people, sensitive or unique identifying information, or unlawful outside access is involved, report to the Personal Information Protection Commission or the Korea Internet & Security Agency within 72 hours. A report may be omitted where the leak route was identified and the information recovered or deleted so that the risk of harm became remarkably low, so keep evidence supporting that decision.
- 04
Notify of a possible leak: Where unlawful access occurred but the affected data subjects are hard to identify, or some information was confirmed to have been traded by a third party, notify all data subjects who may be affected of the items, the suspected time and circumstances, and that further notice will follow once the leak is confirmed.
- 05
Prepare an infringement report or mediation application: An affected data subject organizes the notice received and screen or text records, then reports the infringement to the Personal Information Infringement Report Center or, to seek remedies such as damages, files a dispute mediation application with the Mediation Committee. A party who does not state acceptance or refusal within 15 days of receiving the proposal is deemed to have accepted it.
- 06
Update the privacy policy and CCTV signs and respond to fine notices: The privacy policy should contain the Article 30 items such as purpose of processing, retention period, destruction procedure and the privacy officer's contact details, and the CCTV sign should state the purpose and location, recording range and hours, and the manager's contact details. On receiving an advance notice of an administrative fine, submit a written opinion with corrective actions and mitigating circumstances within the deadline.
Filing route
Filing route
Confirm the current filing office, jurisdiction, and online availability on the official website.
Official checkDeadlines & processing notes
Deadlines & processing notes
Fees & official charges
Fees & official charges
Included in the basic fee — Initial document review, required-document guidance, basic form preparation, one filing support and responses to up to two supplement requests.
Conditional success fee — For this service, any conditional success fee may be separately agreed within the lawful service scope and stated in a written engagement agreement. No outcome is guaranteed.
Displayed amounts are starting estimates, not statutory or standard rates. The final fee is confirmed after consultation and document review in the engagement agreement. Government fees and actual expenses may change.
Fees & official charges →Basic documents
Basic documents
Scope of services
Scope of services
Hwang Yunsang Administrative Agent Office prepares and translates documents for administrative agencies, submits them on your behalf, and guides you through permit, application, and notification procedures. Services that require the principal’s personal appearance, principal’s application, or electronic signature may be limited in delegation.