What It Is

K-PIPA (Personal Information Protection Act) is South Korea's comprehensive data privacy regulation, enacted in 2011 with major amendments in 2020, 2023, and 2024. It governs collection, use, storage, transfer, and destruction of personal information by domestic and foreign entities processing Korean residents' data. Employing a consent-centric, risk-based approach, it covers personal, sensitive (e.g., health, biometrics), and unique ID data (e.g., resident numbers).

Key Components

• Core principles: transparency, purpose limitation, data minimization, accountability.
• Obligations: mandatory CPO appointment, granular consents, security measures per 2024 Guidelines, data subject rights (access, erasure, portability in 10 days).
• Breach response: 72-hour notifications; cross-border transfers via consent or certifications.
• Enforcement by PIPC with fines up to 3% revenue.

Why Organizations Use It

Legal compliance avoids massive fines (e.g., Google's $50M); enhances trust, enables EU adequacy flows, supports AI innovation via pseudonymization. Builds competitive edge in privacy-sensitive markets.

Implementation Overview

Phased: gap analysis, data mapping, PbD integration, CPO governance, training, audits. Applies to all data handlers globally targeting Koreans; no certification but PIPC oversight and voluntary ISMS-P.

What It Is

BREEAM (Building Research Establishment Environmental Assessment Method) is a science-led sustainability certification framework for the built environment. Developed by BRE in 1990, it assesses buildings, infrastructure, and communities across lifecycles. Its credit-based, weighted scoring methodology evaluates environmental, health, and resilience performance.

Key Components

• 10 core categories: Management, Health & Wellbeing, Energy, Transport, Water, Materials, Waste, Land Use & Ecology, Pollution, Innovation.
• Credits earned via evidence against scheme-specific manuals; weighted scores yield ratings (Pass to Outstanding).
• Supported by Knowledge Base Compliance Notes (KBCNs) and third-party assurance via licensed assessors and BRE audits.

Why Organizations Use It

• Drives operational savings (e.g., 22-33% energy reduction), asset value uplift (up to 30%), and ESG alignment.
• Meets planning incentives, investor demands, and EU Taxonomy; mitigates risks like regulatory changes.
• Builds stakeholder trust through credible, comparable certifications.

Implementation Overview

• Phased integration: pre-assessment, design, construction, certification, In-Use monitoring.
• Early assessor/AP appointment essential; applies globally to all sizes via schemes like New Construction, In-Use.
• Requires evidence gathering, training, and BRE certification (voluntary but market-driven).