Analysis of Personal Information Protection Act Compliance in Privacy Policies of Seoul Medical Institutions: Focusing on Website Disclosures

Abstract

This study analyzed the current state of privacy policies in medical institutions in Seoul, evaluating differences based on their size. The Personal Information Protection Act requires medical institutions to disclose and state their privacy policies; however, systematic research on actual compliance remains insufficient. Of the 10,004 medical institutions in Seoul (14 tertiary, 44 secondary, and 9,946 primary), we focused on those with websites, examining whether their privacy policies were posted and kept up to date. The analysis found that all secondary and tertiary institutions were running their websites and generally met most legal requirements. However, primary institutions with websites only posted their privacy policies without further updates. This pattern was consistent across institutions, highlighting the need for stronger personal information protection and enhanced measures, particularly for primary medical institutions. This study provides foundational data for improving personal information protection in medical institutions.