What Changed — Three Key Relaxations in the Revised Guideline
Health data has long been the highest-value yet hardest-to-use data category. The revised Health Data Utilization Guideline introduces three changes that lower that barrier.
1. Introduction of Low-Risk Pseudonymized Datasets
A standard dataset concept has been established, built only from fields with structurally low re-identification potential. Instead of designing a pseudonymization scheme from scratch and seeking individual approval for every study, researchers can now draw on predefined standard sets — cutting both review burden and lead time significantly.
2. Clarified Standards for Deceased Patients' Data
Under the Personal Information Protection Act, "personal information" refers to living individuals. In practice, however, deceased patients' records were treated conservatively due to concerns about identifying surviving family members. The revision resolves this gray area, opening a data pathway for survival analysis and long-term prognosis research.
3. Streamlined Pseudonymization for Unstructured Imaging Data
X-rays, CT scans, and pathology slides carried a double burden: stripping identifiers from DICOM headers, and assessing re-identification risk in the image itself. With the procedure now clarified, securing training data for medical AI has become a realistic option.
Why This Matters for Small and Mid-Sized Bio Companies
The Practical Process of Securing Data
Mapping Access Routes
Sources fall into several categories: hospital EMR data, sample datasets from the National Health Insurance Service and HIRA, the national health data open system, and public institutions such as the National Cancer Center. Each has its own application channel, forms, and fee structure — fixing the route early largely determines the overall timeline.
Preparing for DRB and IRB Review
Required documents include the research protocol, justification of purpose and data minimization, pseudonymization methodology, safeguard plans, and destruction plans. The most common sticking point is field-by-field necessity justification. Reviewers want more than "this is needed for the research" — they want, for each variable, a statement of which analysis becomes impossible without it.
Adequacy Review and Data Linkage
Pseudonymization results undergo an adequacy review by a committee that includes external experts. Linking datasets across institutions requires going through a designated linkage agency, with separate processes for linkage key management and export approval. A safe planning baseline is four to eight weeks of preparation and four to twelve weeks of review.
The Compliance Framework You Cannot Skip
Connecting This to the Three-Stage K-Bio Regulatory Reform Roadmap
Of the 24 detailed tasks in the government's regulatory reform agenda, 17 are targeted for implementation within 2026. The direction runs along three axes: broader data accessibility, shorter approval timelines, and rationalized manufacturing and quality regulation.
Areas where further relaxation is likely include standards for genomic and omics data, inter-institutional data linkage procedures, and the regulatory acceptance scope of real-world evidence (RWE). What to prepare now is clear: documented data governance, a standing IRB response capability, and data structures aligned with international standards such as OMOP-CDM. When regulations loosen, the gap between a company ready to move immediately and one that starts preparing at that moment is at least a year.
How KITIM Can Help
The Korea Institute of Technology Innovation Management (KITIM) supports bio and healthcare companies at the operational level of data strategy. We work with clients on data utilization planning and access route design, DRB and IRB documentation and response to review comments, internal privacy management plans and safeguard frameworks, and linking data-driven R&D projects to government support programs. If data access has become your bottleneck, now is the time to put the structure in place. Reach out through the inquiry page on the KITIM website to schedule a consultation.