South Korea PIPA 31-2: Foreign controllers above the thresholds appoint a domestic representative, preferably their Korean affiliate

Article 31-2 with Decree Article 32-3: a controller without an address or office in Korea whose prior-year revenue is at least 1 trillion won, or holds data of one million or more Korean data subjects (daily average), or is designated after a document request, appoints in writing a domestic representative with an address or office in Korea to handle complaints and remedies, breach notices and reports, and document submissions; from October 2025 it must pick its Korean subsidiary or controlled entity if it has one, and educate and supervise the representative at least yearly; the representative's details go in the privacy policy, and its breaches are attributed to the controller.