IP cameras, which have been identified as a potential pathway for personal information leaks in places like homes, bathrooms, and hospital operating rooms, will see enhanced security management. Strong password settings will be enforced, and businesses utilizing IP cameras, such as hospitals, may face fines of up to 3% of their revenue if they fail to implement security measures like password settings, leading to incidents.
On the 14th, the Ministry of Science and ICT, the Personal Information Protection Commission, the Korea Communications Commission, and the police announced they would implement a plan to strengthen IP camera security. IP cameras are connected to wired or wireless internet and can transmit video to other devices, serving as safety management tools in homes, businesses, medical facilities, and public areas. However, hacking incidents have frequently led to the exposure of people’s private lives on harmful overseas websites.
Currently, IP cameras manufactured domestically require users to set a password during initial setup, which can help prevent hacking. However, if users set simple passwords, they remain vulnerable to hacking. Additionally, only domestic products mandate password settings, leaving imported products from countries like China unregulated.
The government plans to ensure that, starting from the latter half of next year, products manufactured or officially imported domestically are equipped with features to encourage the setting of strong security passwords from the design stage. Instructions on setting passwords will be included in product packaging, and applications used by IP camera users will also promote safe password settings and periodic changes.
Monitoring will be increased for IP cameras purchased through international online shopping that lack domestic radio certification (KC certification). Distributing illegal devices within the country can result in imprisonment of up to three years or fines of up to 30 million won, according to the Radio Waves Act. For uncertified IP cameras installed in public institutions, plans are underway to collaborate with relevant departments to remove them, assess the distribution status of IP cameras in Korea, and identify areas needing security improvements.
However, the current measures do not include sanctions for individuals who purchase uncertified IP cameras through personal overseas shopping, as formal import regulations do not apply. Currently, individuals can purchase one IP camera per person via international online shopping. The government aims to boost awareness among these consumers to ensure they set high-security passwords. If issues with illegal video leaks from IP cameras continue, they plan to gather feedback from consumer groups and consider improving the international shopping system.
Furthermore, the government plans to ensure that private spaces with high foot traffic or significant importance, like hospitals and shopping malls, use security-enhanced products, similar to the previous requirement for security-certified IP cameras in the public sector as of March last year. They intend to legislate the “Act on the Installation and Operation of Video Information Processing Equipment” (tentative name) to mandate the use of certified IP cameras at multi-use facilities.
Meanwhile, websites illegally exposing personal information videos will be blocked through deliberation by the Korea Communications Standards Commission, and users will be informed via telecommunication companies if the IP from which the video was leaked is identified.
Yoo Sang-im, Minister of Science and ICT, emphasized, “It’s crucial to create a safe environment for using IP cameras, as they are widely used in various aspects of daily life.”
Ko Hak-soo, Chairman of the Personal Information Protection Commission, stated, “With the increasing use of IT products like IP cameras and wall pads that collect personal information, concerns about privacy infringement are growing,” adding, “We will make active improvements to ensure IP cameras can be used safely.”