South Korea revises child data protection laws

The national regulator for broadcasting and communication services, The Korea Communications Commission (KCC) has stated that revised laws will come into effect in 2020.

South Korea has amended its data collection laws for children, in which companies are required to gain explicit consent from the parents or legal guardians of children aged under 14.

Companies obtaining personal data (e.g. location) are now required to ask the children aged under 14 whether their parents or legal guardian give consent. Parental consent can be given via payment information, authentication through smartphones or through text.

A written agreement will be then sent to the parents or legal guardians by the companies to confirm the consent.

Any company found violating the law and collecting data from children before consent will be fined of up to 3% of their revenue and face administrative punishments.

A spokesperson from KCC said:

“Children are exposed on the internet more than ever thanks to the wide deployment of smartphones.

“We decided to strengthen the law as protecting their privacy is a matter of ethics, and it is the right thing to do.”

Join our free-to-attend digital event, Last Thursday in Privacy, addressing data protection, privacy and security challenges including working from home, COVID-19, global regulations and more. Visit

We have been awarded the number 1 GDPR Blog in 2019 by Feedspot.