On June 1, 2026, South Korea's Personal Information Protection Commission (PIPC) activated the energy-sector phase of its all-sector MyData initiative, enabling citizens to formally request that Korea Electric Power Corporation (KEPCO) and urban gas distributors transfer their consumption records — billing histories, usage volumes, payment records — to third-party service providers of their choosing. The Korea Energy Agency was designated as the sector intermediary managing those transfers, and citizens can track and revoke permissions through the OnMyData portal (onmydata.go.kr), operated by the Korea Internet & Security Agency (KISA) on PIPC's behalf.
The launch is the second substantive milestone in what PIPC frames as a 10-sector phased build-out. Healthcare and telecommunications went live on March 13, 2025, under the statutory data portability right created by South Korea's 2023 amendment to the Personal Information Protection Act (PIPA). Energy follows fifteen months later. Education, employment, welfare, transportation, real estate, culture, and retail are scheduled for subsequent waves, with public institutions joining in August 2026 and private-sector expansion completing by February 2027.
Why Energy Data Is Economically Interesting
The reason energy portability draws more than routine regulatory interest is what the data enables beyond billing disputes. The most immediately concrete application: NICE Evaluation & Information, South Korea's leading credit rating agency, has announced plans to incorporate energy payment records into alternative credit scoring models targeting thin-file consumers — young job seekers, early-career professionals, and seniors who lack the loan histories that traditional scoring relies on. Energy bill payment behaviour is among the most reliable financial proxies for creditworthiness, and this data could materially widen credit access for a significant population segment currently underserved by Korean lenders.
Energy portability also enables legitimate efficiency services: integrated consumption dashboards aggregating gas and electricity into a single view, rate optimisation tools, and automatic settlement processing when households move. A less commercial but equally real application PIPC highlighted: welfare check-in services for single-person households, where anomalous energy consumption can signal health emergencies. These are services that genuinely did not exist before the portability right because KEPCO had no obligation and limited incentive to release data to competitors.
The Architecture Behind the Launch
South Korea's approach differs from the European GDPR portability right's demand-driven model in one important way. Rather than requiring each data controller to build its own transfer API, PIPC routes transfers through designated sector intermediaries — the Korea Energy Agency in the energy case — who standardise protocols and maintain the technical bridge between data holders and receiving services. This intermediary-plus-portal model is a deliberate centralisation choice: it reduces compliance costs for smaller data holders and creates accountability checkpoints, while concentrating risk if intermediary infrastructure fails or is compromised.
The legal foundation is the February 2026 amendment to the Enforcement Decree of PIPA, which formally extended the portability right from three initial sectors to all industries. PIPC backed the rollout with a ₩17 billion (~$12M USD) support programme announced in March 2026, funding four categories of MyData service development with grants of up to ₩3 billion per project — a pragmatic recognition that the portability right alone does not conjure the services that make it valuable.
Steelmanning the Sceptics
Before arguing that the design is broadly sound, it is worth taking the privacy objections seriously. Energy consumption data is more intimate than it first appears. Granular usage patterns reveal when a home is occupied, sleeping schedules, appliance use, and by inference personal habits. A credit scoring firm that now receives energy records is creating a financial dependency on what was previously purely utility-service information — with uncertain implications for storage, re-sale, or secondary uses that consumers did not anticipate when they enrolled.
These are real concerns. The question is whether the right regulatory response is to block portability or to regulate the receiving end — and South Korea's financial MyData precursor offers instructive evidence. The Credit Information Act's MyData regime, which launched in January 2022 under the Financial Services Commission and accumulated more than 117 million cumulative subscriptions by early 2024, generated few documented consumer harms precisely because the regulatory burden fell on certified receiving services, not the original data holders. PIPC's PIPA-based framework extends the same logic: mandatory certification for receiving services, KISA oversight, and affirmative per-transfer consent.
The Execution Risk Is Infrastructure, Not Concept
The most candid admission in the June 2026 launch documentation is that actual data transfer capability depends on data providers and the Korea Energy Agency completing their technical infrastructure connections. In other words, June 1 was a regulatory activation — the right went live, but not every data pipe did. KEPCO and gas utilities will bring systems online incrementally, with eligible data types announced as connections are completed.
This gap between regulatory go-live and technical readiness is a known failure mode in portability regimes. The EU's open banking PSD2 framework took two to three years to produce functional API ecosystems in most member states, despite firm deadlines. South Korea's intermediary model should compress that lag — the Korea Energy Agency handles standardisation rather than leaving each utility to design its own API — but the risk of developer and consumer anticipation outpacing actual system availability is real. PIPC will need to publish technical readiness indicators alongside sector activation dates, not just after the fact.
A Portability Design Worth Watching
South Korea is attempting something genuinely ambitious: a unified portability infrastructure across ten sectors under a single statutory right, a single consumer portal, and a network of sector intermediaries. No other jurisdiction has attempted this at comparable scale. The EU's data portability landscape remains fragmented across GDPR Article 20, open banking, open energy under the Electricity Directive, and the forthcoming Data Act — useful individually, incoherent as a system.
The energy sector addition matters not because KEPCO data is uniquely sensitive or the use cases uniquely transformative, but because it tests whether the MyData architecture holds as it scales beyond its initial two-sector deployment. If the Korea Energy Agency performs well and NICE's credit scoring model meets evidentiary standards, the next seven sectors will find smoother ground. If infrastructure gaps persist or consent complexity erodes user trust, the regime risks the same adoption plateau that hobbled early open banking in Europe. The architecture is right. The execution timeline is the variable that matters now.