Description

Announced equivalence recognition for personal data transfers between South Korea and the EU

On 19 November 2024, the Personal Information Protection Commission (PCC) announced that EU privacy protections were equivalent to those provided under South Korean Law. The PCC convened a committee of 12 experts from academia, law, civil society, and industry to analyse the EU's privacy laws and protection mechanisms. The committee concluded they were equivalent to South Korean privacy laws and protections. Final approval of this conclusion will be made following a policy consultation council with the relevant ministries. If equivalence is formally recognised, personal data can be transferred between South Korea and the EU without additional compliance measures, such as contracts or certifications.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Cross-border data transfer regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2024-10-31
under deliberation

On 31 October 2024, the Personal Information Protection Commission of South Korea announced the equ…

2024-11-19
under deliberation

On 19 November 2024, the Personal Information Protection Commission (PCC) announced that EU privacy…

We use cookies and other technologies to perform analytics on our website. By opting in, you consent to the use by us and our third-party partners of cookies and data gathered from your use of our platform. See our Privacy Policy to learn more about the use of data and your rights.