Internet Promotion Agency Announces 'Personal Information Impact Assessment Fee Calculation Guide'

Expectations for Improving the Quality of Degraded Impact Assessments

[Asia Economy Reporter Lim Hye-sun] The Korea Internet & Security Agency (KISA) announced on the 23rd that it has released the 'Personal Information Impact Assessment Fee Calculation Guide.' This is to ensure appropriate fee calculation and improve quality for the personal information impact assessment projects, which are part of software (SW) projects.

Personal information impact assessment is a system established under Article 33 of the Personal Information Protection Act, requiring the analysis of risks to personal information subjects and identification of improvements prior to the construction or modification of personal information files (systems). Public institutions and others must estimate the budget required to conduct personal information impact assessments. To do so, they have been applying the information security consulting fee calculation standards from the 'SW Project Fee Calculation Guide.' However, due to the lack of reflection of the unique characteristics of personal information impact assessment projects and the absence of clear standards such as average input man-hours, difficulties arose in calculating appropriate fees. When project amounts for personal information impact assessments are set too low, it leads to a decline in the quality of the assessment execution.

To address these issues, KISA has prepared the 'Personal Information Impact Assessment Fee Calculation Guide,' which presents appropriate fee standards and calculation methods for personal information impact assessment projects. This guide includes a newly established 'Consulting Workload Method' that considers the weighted difficulty of assessment tasks, in addition to the existing 'Input Man-Hours Method.' The Input Man-Hours Method can be used to calculate the overall fee for impact assessment projects. The Consulting Workload Method can be used to calculate detailed fees according to project types based on the workload of the assessment tasks and difficulty values by system classification.

An automatic fee calculation tool is provided to easily calculate impact assessment fees, similar to the National Tax Service's automatic year-end tax settlement calculation service. The Personal Information Impact Assessment Fee Calculation Guide and the fee calculation tool are available on the Personal Information Protection Portal.