No data stored in mobile number checks trial: South Korean gov't

South Korea’s science ministry said no personal data will be stored during real-time face recognition checks required for new mobile number registrations, after public concerns about privacy and data breaches.

The policy, which began a trial on December 23, requires applicants to use the PASS app to scan their face and match it with a photo ID.

As of December 24, around 43,000 people signed a petition demanding lawmakers scrap the policy.

The ministry said all biometric data is erased immediately after verification, and pledged to review the security of the system with mobile carriers and relevant organizations.

The government will also look into easing difficulties for senior users during the trial, before official implementation in March 2026.

Currently, the system only works with resident registration cards and driver’s licenses, but authorities plan to add support for documents used by foreign residents.

🔗 Source: Yonhap

🧠 Food for thought

Implications, context, and why it matters.

Real-time biometric verification does not guarantee the data won’t be stored elsewhere

The ministry says PASS does not keep biometrics after checks, but the claim leaves out retention points, and no independent security audits or third-party certifications exist 1.
PASS runs on SK Telecom, KT, and LG Uplus (South Korea’s largest mobile network operators) 1. SK Telecom was fined $100 million in 2025 for exposing 23 million customers’ data, and South Korea saw breaches affecting over half the population that year 2.
Key design details remain unclear. Matching may run on the phone or on carrier servers, and the plan does not spell out audit logs or retention for results or metadata.

Payment and identity platform providers can offer business-to-business verification infrastructure for MVNOs

Mobile Virtual Network Operators (MVNOs) accounted for 92% of fake phone registrations in 2024 3, and must meet the same rules as major carriers from March 2026 4.
Many providers lack resources to build facial biometric verification, creating demand for white-label (rebrandable) or Application Programming Interface (API) tools.
Vendors offering liveness detection (anti-spoofing checks that confirm a real person is present), ID checks, and PASS app integration can serve 43 MVNOs in the trial in South Korea 3.
Across Asia 4, Indonesia plans biometric Subscriber Identity Module (SIM) checks from July 2026, Thailand requires liveness detection, and Malaysia is building a federated identity network (a framework that lets multiple organizations share trusted identities).
Firms that ship compliant tools for March 2026 in South Korea can reuse the stack across these markets.