A survey found that 72% of domestic corporations collect and manage customer information differently from what is specified in their privacy policies.
On the 16th, the Personal Information Protection Commission announced the results of the '2024 Privacy Policy Evaluation System,' noting that it evaluated 49 corporations, including big tech firms such as Naver, Kakao, Google, and Meta, as well as online shopping malls and medical institutions.
The survey revealed that the scope of corporations' personal information collection, processing purposes, and retention periods often did not match their policies, and some foreign corporations appeared to operate the domestic agent system only in form.
In addition, many users experienced difficulties in verifying corporations' privacy policies. To find relevant information on websites, they had to scroll more than an average of 12 times, and some online shopping malls required more than 50 scrolls to confirm the policies.
In contrast, Seoul St. Mary's Hospital, Lotte Tour Development, Homeplus, and Gmarket have received relatively high ratings by clearly guiding users on procedures to immediately raise complaints related to personal information.
The Personal Information Protection Commission will notify corporations of the evaluation results to encourage improvements and plans to announce the evaluation plan for 2025 in May, focusing on areas closely related to people's lives, such as AI and smart homes (Home IoT).