Republic of Korea: Personal Information Protection Commission concluded assessment of Amazon Web Services, Microsoft Azure, and Naver Cloud Platform on personal information protection

Description

Personal Information Protection Commission concluded assessment of Amazon Web Services, Microsoft Azure, and Naver Cloud Platform on personal information protection

On 10 December 2025, the Personal Information Protection Commission (PIPC) concluded the review into cloud service providers, including Amazon Web Services, Azure, and Naver Cloud Platform. In June 2025, the PIPC assessed the services to test compli…

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
infrastructure provider: cloud computing, storage and databases
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2025-06-11
under investigation

On 11 June 2025, the Personal Information Protection Commission (PIPC) of the Republic of Korea ann…

2025-12-10
concluded

On 10 December 2025, the Personal Information Protection Commission (PIPC) concluded the review int…