Republic of Korea: Adopted regulations on overseas transfer of personal information

On 12 October 2023, the Personal Information Protection Commission adopted the regulations on the overseas transfer of personal information. The regulations outline details related to the overseas transfer expert committee, criteria for cross-border data transfer requirements and information concerning the suspension order of transfers. The regulations establish the procedures for the overseas transfer expert committee, a body responsible for evaluating aspects of the overseas transfer of personal information. It also provides provisions for new requirements regarding cross-border data transfers, including the certification process and evaluation criteria for obtaining overseas transfer certification. Additionally, the regulations outline procedures for recognising the level of personal information protection for "target countries for transfer" and information concerning suspension orders for cross-border data transfers, covering order procedures, notification formats, objection processes and conditions for release.