Last month, South Korea amended its Act on the Promotion of Information and Communications Network Utilization and the Protection of Information to enhance accountability for data protection and liability for breaches.  The amendments increase the potential sanctions against companies that suffer data breaches, as well as those that engage in unauthorized transfers of personal data.  The law, which will take effect on September 23, 2016, also requires companies to obtain prior consent from customers for certain transfers of their personal information abroad.  Those that do not get the necessary prior consent may now face statutory fines of up to three percent of revenue related to the infraction.