정부, 개인정보 분야 '고·중·저'로 차등 관리한다

South Korea's government mandates a tiered risk-based data protection framework, particularly tightening oversight of platforms handling youth information through Privacy by Design principles and ISMS-P certification. This shift from reactive compliance to architecture-embedded privacy protection significantly raises regulatory costs for EdTech and platform operators.