Republic of Korea: Adopted Amendment to Cloud Security Assurance Program including data localisation requirements

On 19 January 2023, the Korean Ministry of Science and Technology Information and Communication issued a notice of implementation and adopted an amendment to the Cloud Security Assurance Program (CSAP). Under the amendment, to obtain a CSAP certification by the Korea Internet and Security Agency (KISA), the service provider's cloud computing system and associated data, backup systems, and management and operating personnel must be located in Korea.