DLG Law Corporation provides tailored legal advice on the processing and utilization of personal data across a wide range of industries including fintech, mobility, pharmaceuticals/biotech, security technology, and AI/big data. As each industry handles data differently, customized data compliance frameworks are essential.
For companies operating globally, compliance with international regulations such as GDPR, CCPA/CPRA, COPPA, and HIPAA is crucial. DLG advises on optimized personal data processing strategies based on each client’s specific circumstances. Our firm has experience in building GDPR compliance systems for multinational corporations' overseas branches, offering practical solutions that reflect clients’ business environments and regulatory needs. We also advise on innovative data-driven business models, including MyData projects in both financial and non-financial sectors, pseudonymized data processing and combination, decentralized identity (DID) services, and data trading.
As the only law firm entrusted by the Ministry of Science and ICT to manage the ICT Regulatory Sandbox program, DLG is uniquely positioned to assist clients in launching innovative services by resolving regulatory barriers. In response to the growing threat of data breaches and hacking incidents, we collaborate with security experts to provide swift legal and technical support. In the event of a data breach, we activate an emergency task force to minimize damages and offer appropriate countermeasures.
Our Data Privacy & Big Data Practice Group combines in-depth industry knowledge with up-to-date regulatory insights to deliver precise and forward-looking legal services. We closely monitor legislative developments such as amendments to the Personal Information Protection Act and emerging digital platform regulations to ensure our clients remain compliant and competitive.
Key Services
Drafting and revising privacy policies and terms of use for location-based services by industry
Structuring and advising on data outsourcing and third-party sharing
Legal counsel on MyData services in financial and non-financial sectors (e.g. healthcare, energy, telecom)
Legal support for pseudonymized data processing, combination, and sales
Regulatory sandbox applications for data-driven services
Comprehensive compliance, including ISMS certification and location-based service licenses
Data breach incident response
GDPR, CCPA compliance assessments and guidance
Representative Cases
Legal analysis of erroneous data usage by an IT company
Cookie policy review for a global corporation
Responding to KISA’s data handling inspection requirements
Advising on healthcare data usage and provision for a medical company
Legal review of data sales services by an IT company
Assessment of ad identifier (ADID, IDFA) usage by an app operator
Drafting terms of use and privacy policies for a digital therapeutics application
Full-spectrum MyData (data portability) advisory for a medical company
Legal review on continued use of data by subcontractors in data processing arrangements