The Personal Information Protection Act stipulates that personal information is information
recorded electronically or otherwise relating to an identified or identifiable natural person, and does not include
anonymized information. This includes personal information such as face recognition information. When
processing personal information, the personal information processor shall not process personal information in
an illegal manner, while following the principle of “informed consent”. However, there are still some problems
in the application of the principle of “informed consent” in the real society, such as the high cost of the subject
of personal information, the lack of practical effect of the principle of consent, and the need to improve the
protection measures of the rights of the subject of personal information.