<?xml version="1.0" encoding="utf-8" standalone="yes"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml"><url><loc>https://datalaw.kr/</loc><lastmod>2026-09-13T10:30:00+09:00</lastmod></url><url><loc>https://datalaw.kr/privacy/</loc><lastmod>2026-09-13T10:30:00+09:00</lastmod></url><url><loc>https://datalaw.kr/breach-check/</loc><lastmod>2026-09-13T09:20:00+09:00</lastmod></url><url><loc>https://datalaw.kr/updates/</loc><lastmod>2026-09-13T09:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/en/enforcement/</loc><lastmod>2026-09-13T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/tags/ai%EA%B7%9C%EC%A0%9C/</loc><lastmod>2026-09-12T16:30:00+09:00</lastmod></url><url><loc>https://datalaw.kr/tags/%EA%B0%9C%EC%9D%B8%EC%A0%95%EB%B3%B4%EB%B3%B4%ED%98%B8%EB%B2%95/</loc><lastmod>2026-09-13T07:15:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/pipc-ai-enforcement-census/</loc><lastmod>2026-09-12T16:30:00+09:00</lastmod></url><url><loc>https://datalaw.kr/tags/%EA%B3%BC%EC%A7%95%EA%B8%88%EC%A0%9C%EC%9E%AC/</loc><lastmod>2026-09-13T07:15:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/</loc><lastmod>2026-09-13T07:15:00+09:00</lastmod></url><url><loc>https://datalaw.kr/tags/%EC%8A%A4%ED%83%80%ED%8A%B8%EC%97%85%EC%8B%A4%EB%AC%B4/</loc><lastmod>2026-09-12T16:30:00+09:00</lastmod></url><url><loc>https://datalaw.kr/ai-act/</loc><lastmod>2026-09-12T12:30:00+09:00</lastmod></url><url><loc>https://datalaw.kr/en/about/</loc><lastmod>2026-09-12T11:30:00+09:00</lastmod></url><url><loc>https://datalaw.kr/en/fine-calculator/</loc><lastmod>2026-09-12T11:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/fine-calculator/</loc><lastmod>2026-09-12T22:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/breach-fine-insurance-coverage/</loc><lastmod>2026-09-11T12:55:00+09:00</lastmod></url><url><loc>https://datalaw.kr/tags/%EC%9C%A0%EC%B6%9C%EB%8C%80%EC%9D%91/</loc><lastmod>2026-09-13T07:15:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/voluntary-compensation-fine-mitigation/</loc><lastmod>2026-09-11T12:50:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/sanction-history-blind-period/</loc><lastmod>2026-09-11T08:30:00+09:00</lastmod></url><url><loc>https://datalaw.kr/tags/%EA%B8%B0%EC%97%85%EC%9D%B8%EC%88%98/</loc><lastmod>2026-09-11T14:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/newsletter/</loc><lastmod>2026-09-11T06:38:00+09:00</lastmod></url><url><loc>https://datalaw.kr/breach-notices/</loc><lastmod>2026-09-10T11:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/user-video-ai-training-consent/</loc><lastmod>2026-09-10T00:50:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/cpo-budget-duty-parent-funded-subsidiary/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/breach-notice-text-signals/</loc><lastmod>2026-09-10T16:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/about/</loc><lastmod>2026-09-07T10:09:00+09:00</lastmod></url><url><loc>https://datalaw.kr/en/pipc-enforcement-foreign-companies/</loc><lastmod>2026-09-11T06:38:00+09:00</lastmod></url><url><loc>https://datalaw.kr/en/domestic-representative/</loc><lastmod>2026-09-11T06:38:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/procedure/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/fss/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/breach/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/parties/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/orders/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/batch/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/dual-fine-exclusion-network-act/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/criminal/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/foreign/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/repeat/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/defenses/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/breach-notice/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/en/</loc><lastmod>2026-09-11T06:38:00+09:00</lastmod></url><url><loc>https://datalaw.kr/guides/ai-basic-law/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/guides/</loc><lastmod>2026-09-12T07:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/violations/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/timeline/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/mediation/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/damages/</loc><lastmod>2026-09-12T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/ciso-cpo-concurrent-appointment/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/public-ai-act-vendor-contracts/</loc><lastmod>2026-08-28T13:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/breach-mediation-acceptance-clock/</loc><lastmod>2026-09-11T14:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/tags/%EC%9C%84%ED%83%81%EC%88%98%ED%83%81/</loc><lastmod>2026-09-11T14:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/breach-cause-typology/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/after-breach-notification-stages/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/ai-product-confirmation/</loc><lastmod>2026-08-28T13:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/tags/%EA%B0%9C%EC%9D%B8%EC%A0%95%EB%B3%B4%EC%B2%98%EB%A6%AC%EB%B0%A9%EC%B9%A8/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/tags/%EA%B5%AD%EC%99%B8%EC%9D%B4%EC%A0%84/</loc><lastmod>2026-09-12T14:30:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/generative-ai-privacy-policy/</loc><lastmod>2026-08-28T13:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/ai-basic-law-grace-period-penalty/</loc><lastmod>2026-08-28T13:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/ai-basic-law-domestic-representative/</loc><lastmod>2026-08-28T13:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/generative-ai-disclosure-labeling/</loc><lastmod>2026-08-28T13:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/high-impact-ai-check/</loc><lastmod>2026-08-28T13:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/pre-inspection-recommendation-acceptance/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/unpublished/</loc><lastmod>2026-09-10T19:30:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/kmcc/</loc><lastmod>2026-09-07T10:57:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/pipc-sanction-court-divergence/</loc><lastmod>2026-09-07T15:27:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/litigation/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/article-22/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/article-34/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/article-26/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/article-21/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/article-28/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/article-24/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/article-39-4/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/article-23/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/article-29/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/article-24-2/</loc><lastmod>2026-09-11T09:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/ai-development-exception-waived-provisions/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/resident-number-in-logs-separate-violation/</loc><lastmod>2026-09-02T07:40:00+09:00</lastmod></url><url><loc>https://datalaw.kr/sanctions/</loc><lastmod>2026-09-11T06:38:00+09:00</lastmod></url><url><loc>https://datalaw.kr/decisions/</loc><lastmod>2026-09-10T21:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/pipc-fine-mitigation-factors/</loc><lastmod>2026-09-13T07:15:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/scraped-data-asset-due-diligence/</loc><lastmod>2026-09-09T07:25:00+09:00</lastmod></url><url><loc>https://datalaw.kr/tags/%EB%A7%88%EC%9D%B4%EB%8D%B0%EC%9D%B4%ED%84%B0/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/autogenerated-privacy-policy-mismatch/</loc><lastmod>2026-08-28T13:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/lbs-filing-gap-in-dd/</loc><lastmod>2026-08-28T13:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/prior-sanction-three-year-clock/</loc><lastmod>2026-09-11T14:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/privacy-findings-cp-vs-covenant/</loc><lastmod>2026-09-11T14:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/hq-automated-decision-korea-duty/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/business-transfer-notice-both-parties/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/overseas-transfer-data-subject-rights/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/global-dpa-korea-transfer-contract-gap/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/guides/outsourcing-liability/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/guides/data-breach-response/</loc><lastmod>2026-09-12T07:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/guides/pipa-2026-amendment/</loc><lastmod>2026-09-11T10:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/overseas-transfer-certification-list/</loc><lastmod>2026-08-05T07:15:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/due-diligence-data-request-list/</loc><lastmod>2026-08-28T12:40:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/pipc-result-publication-criteria/</loc><lastmod>2026-09-11T10:30:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/bias-testing-sensitive-data-korea-gap/</loc><lastmod>2026-08-22T23:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/sdk-processor-vs-third-party-transfer/</loc><lastmod>2026-09-09T07:25:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/english-pipa-version-gap/</loc><lastmod>2026-09-11T06:38:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/lawful-basis-gdpr-korea-gap/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/domestic-representative-redesignation/</loc><lastmod>2026-09-12T14:30:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/global-policy-korea-gap-map/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/child-privacy-law-vs-inspection/</loc><lastmod>2026-08-22T21:50:00+09:00</lastmod></url><url><loc>https://datalaw.kr/tags/%EC%95%84%EB%8F%99%EC%B2%AD%EC%86%8C%EB%85%84/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/child-data-sanction-without-breach/</loc><lastmod>2026-09-07T15:27:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/mydata-receiver-designation-or-not/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/mydata-request-deadline-and-refusal/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/reps-warranties-pre-closing-cause/</loc><lastmod>2026-08-17T07:05:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/uk-korea-transfer-basis-gap/</loc><lastmod>2026-08-17T07:05:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/foreign-subsidiary-cpo-designation/</loc><lastmod>2026-09-11T10:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/employee-data-exfiltration-dual-duty/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/vendor-data-after-contract-ends/</loc><lastmod>2026-08-16T13:43:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/reps-warranties-damage-calculation/</loc><lastmod>2026-09-10T16:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/who-controls-devices-at-customer-sites/</loc><lastmod>2026-08-28T13:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/processor-indemnity-recourse-ratio/</loc><lastmod>2026-08-28T13:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/pipa-2026-amendment-comparison/</loc><lastmod>2026-09-11T10:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/api-response-unrequested-personal-data/</loc><lastmod>2026-08-23T07:15:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/ma-reps-warranties-privacy-claims/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/ransomware-corruption-breach-notification/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/mydata-transfer-right-who-and-when/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/processor-breach-consignor-liability/</loc><lastmod>2026-08-28T13:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/global-breach-playbook-korea-gap/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/human-error-breach-sanctions/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/eu-korea-adequacy-first-review/</loc><lastmod>2026-08-28T13:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/misinformation-platform-duties/</loc><lastmod>2026-08-28T13:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/ai-training-data-copyright/</loc><lastmod>2026-08-28T13:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/ai-basic-law-business-duties/</loc><lastmod>2026-09-09T07:25:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/privacy-policy-checklist-2026/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/retention-vs-destruction/</loc><lastmod>2026-08-28T13:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/privacy-policy-two-documents/</loc><lastmod>2026-08-28T13:10:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/under-14-signup-consent/</loc><lastmod>2026-09-11T07:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/breach-response-calculus-shift/</loc><lastmod>2026-09-11T10:00:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/ai-basic-law-procurement/</loc><lastmod>2026-09-10T21:30:00+09:00</lastmod></url><url><loc>https://datalaw.kr/posts/tiktok-pixel-behavioral-data/</loc><lastmod>2026-08-28T13:10:00+09:00</lastmod></url></urlset>