As digital transformation accelerates, the importance of personal data protection continues to rise. D&A LLC’s Data Security Practice provides specialized and practical advisory services that enable companies to operate securely and maintain full compliance with applicable statutes and regulations.
Leveraging extensive experience in contributing to the enactment and amendment of personal data protection laws and the formulation of national master plans, our attorneys and experts conduct comprehensive reviews across the full lifecycle of personal data processing, from service planning to launch, operation, management, and disposal. Drawing on deep industry experience in various sectors such as marketing and advertising, big data analytics, AI services, finance and fintech, education, retail and commerce, and medical and healthcare, we deliver optimal compliance strategies tailored to each client’s business needs.
We provide practical, implementation-ready solutions informed by authoritative interpretations from regulatory bodies, judicial precedents, and administrative sanction cases under the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Credit Information Use and Protection Act, and the Electronic Financial Transactions Act, and other applicable laws. Our services include advising on the preparation of privacy policies and consent forms, managing third-party data-sharing and outsourcing structures, and conducting risk assessments for cross-border data transfers. In the event of a large-scale personal data breach, hacking incident, or other security intrusion, we offer end-to-end support, from identifying the cause of the incident, filing reports with regulatory authorities, notifying data subjects, responding to investigations, managing complaints, and handling damages litigation. We further assist clients in strengthening organizational governance by developing internal data-security policies and manuals, providing employee training, and establishing audit and inspection frameworks.
D&A LLC’s Data Security Practice views personal data regulation not merely as a legal risk but as a foundation for corporate trust and sustainable growth. By providing tailored advisory services aligned with each client’s services, industry, and business strategy, we deliver practical and resilient legal protection.
Legal advisory services on data protection laws, including the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Credit Information Use and Protection Act, and the Electronic Financial Transactions Act
Diagnosis and assessment of corporate personal data protection practices, with consulting on improvements
Development of personal data protection compliance frameworks
Assistance with investigations and administrative sanctions for violations of the Personal Information Protection Act, including representation in related administrative litigation
Representation in civil and criminal proceedings related to personal data breaches
Legal advisory services on foreign personal data protection frameworks, including the EU GDPR
Performed data security compliance projects for Dongkuk Steel Mill Co., Ltd.
Performed data security compliance projects for Eugene Corp.
Advised NHN Commerce Corp. on data protection laws, including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection.
Advised KT Commerce Co., Ltd. on data protection laws, including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection.
Advised SM Hiplus Corp. on data protection laws, including the Personal Information Protection Act.
Advised Kangwon Land, Inc. on personal data management.
Advised the Consumer Loan Finance Association on data protection laws, including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection.
Advised the Ministry of Employment and Labor on data protection laws, including the Personal Information Protection Act.
Advised Bolt Tech Inc. on data-protection laws, including the Personal Information Protection Act.
Advised Spotify on data protection laws, including the Personal Information Protection Act.
Assisted and represented NHN Commerce Corp. in responding to a disposition issued by the Personal Information Protection Commission.
Assisted and represented NHN WETOO Corporation in responding to a disposition issued by the Personal Information Protection Commission.
Represented HITEJINRO Co., Ltd. in a case involving alleged violations of the Personal Information Protection Act.
Represented SK Communications Co., Ltd. in a class-action litigation related to a personal data breach.
Represented StockX LLC in matters related to a personal data breach.