Bio
Profile
Experience
Kim & Chang (2012-Present)
Judge Advocate, Republic of Korea Air Force (2009-2012)
Representative Mattersshow
- Represented major domestic financial institutions in investigations by regulatory authorities and in civil and criminal litigations regarding personal information leakage.
- Represented a major global pharmaceutical company in its civil and criminal litigation in a personal information leakage case.
- Represented banks, insurance companies, global SNS service providers, and telecommunications companies in responding to investigations concerning compliance with data protection law by the Financial Supervisory Service and Personal Information Protection Commission.
- Conducted privacy & IT compliance reviews for banks, securities, insurance, and fintech companies.
- Advised on the use of data for the development and operations of AI models.
- Advised on the use of data for the development and operation of an internal control system for preventing and detecting financial frauds.
- Advised banks and fintech companies on applying for regulatory exemptions (regulatory sandbox) to promote data utilization.
- Advised banks and fintech companies on obtaining licenses and operating financial MyData Business (Account Information Service Providers in Korea).
- Advised foreign financial companies on issues related to offshore data transmission and usage of cloud computing services.
- Advised major global and domestic banks on KIKO mis-selling cases.
- Advised a foreign financial company in a Korea Fair Trade Commission’s cartel investigation.
- Advised foreign financial companies in police investigations regarding issuances of overseas debt bonds.
Representative Activitiesshow
Publications/Activities
- Practical Law Global - Information Security Considerations/Cyber Incident Response and Data Breach Notification (Co-author, Thomson Reuters, 2024)
- Practical Law Data Privacy Advisor - Information Security Considerations/Cyber Incident Response and Data Breach Notification (Co-author, Thomson Reuters, 2021)
- Amendment and Implications of the Three Data Privacy Laws (Focusing on the Credit Information Act), Electronic Financial Business and Financial Security 20 (Financial Security Institute, 2020)
- The Concept and Legal Issues of Open Banking, BFL Vol. 99 (Co-author, Center for Financial Law, Seoul National University, 2020)
- The Study of the Implementation of Information Protection Technology for MyData in Financial Sector (Co-author, Financial Service Commission, 2019)
- Euromoney Financial Crime & Cyber Security Handbook 2014/15: Korea chapter (Co-author, Euromoney, 2014)
- “Improving the Legal System in the Era of MyData 2.0,” MyData Forum of Center for Technology Law and Policy, Korea University (2024)
- “Practical Law for Digital Finance,” (Korea Banking Institute, 2019, 2023-2024)
- “Legal Issues in Use of API in Finance Industry,” Korea Credit Information Service - Insurance Credit Information Seminar (2019)
- “Keywords for Data Combination: Pseudonymization, Anonymization and De-identification,” Privacy Global Edge 2019 (2019)
- “Introduction of MyData Industry and Legal Issues,” Financial Security Institute Big Data Council (2018)
Education
UC Berkeley School of Law (Visiting Scholar, 2017-2018)
Professional Legal Education Program, UC Berkeley School of Law (Certificate in Law and Technology, 2017)
Judicial Research and Training Institute of the Supreme Court of Korea (2009)
Seoul National University (LL.B., 2006)
Qualifications
Admitted to bar, Korea, 2009
Languages
Korean and English
Insights
-
Articles
Cyber Incident Response and Data Breach Notification: South Korea │ Practical Law
2024.11.01 -
Articles
Information Security Considerations: South Korea │ Practical Law
2024.11.01 -
Articles
Practical Law Data Privacy Advisor – Information Security Considerations (South Korea) 2021 / Cyber Incident Response and Data Breach Notification (South Korea) 2021
2021.02.23 -
Newsletters
Proposed Amendments to the Enforcement Decree of the Credit Information Use and Protection Act
2020.04.13