( December 8, 2025, 04:42 GMT | Official Statement) -- MLex Summary: South Korea is preparing to overhaul its information-security and privacy certification regime for companies holding large volumes of personal data, following a string of high-profile breaches at certified firms. The changes, led by the Ministry of Science and ICT and the Personal Information Protection Commission, would in effect make ISMS-P certification mandatory for key personal-information systems at public bodies, telecom operators and online platforms, while tightening criteria for large platforms and other high-risk operators. Authorities plan to revamp audit methods, expand technical and on-site inspections, and allow certification to be denied or cancelled when serious deficiencies are detected. Companies hit by data breaches will face special follow-up audits, and about 900 ISMS-certified telecom and online-shopping operators have been told to run self-checks for security vulnerabilities ahead of the on-site inspections the government aims to complete by the first quarter of 2026.The statement is attached (in Korean).... Prepare for tomorrow’s regulatory change, today MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term. Know what others in the room don’t, with features inclu