June 30, 2022

Volume XII, Number 181

Advertisement
Advertisement

June 29, 2022

Subscribe to Latest Legal News and Analysis

June 28, 2022

Subscribe to Latest Legal News and Analysis

June 27, 2022

Subscribe to Latest Legal News and Analysis

European Commission Adopts South Korea Adequacy Decision

On December 17, 2021, the European Commission announced that it had adopted its adequacy decision on the Republic of Korea. The adequacy decision allows for the free flow of personal data between the EU and Korea, without any further need for authorization or additional transfer tool. The adequacy decision also covers transfers of personal data between public authorities.

The adequacy decision builds on the protections afforded to Europeans under Korean law when their data is transferred, including through additional safeguards agreed by both parties as part of the adequacy dialogue, such as additional transparency requirements and onward data transfer requirements. These rules are binding and enforceable by the Korean data protection authority, the Personal Information Protection Commission (“PIPC”) and Korean Courts.

Regarding potential access to EU personal data transferred by Korean public authorities, the framework will rely on the strong oversight role of the PIPC and will facilitate EU individuals’ redress rights by allowing them to lodge a complaint before the PIPC.

In terms of next steps, the European Commission will carry out a first review of the decision after three years to evaluate the functioning of the framework. Following this initial review, periodic reviews of the framework will take place at least every four years.

Read the full adequacy decision. The European Commission has also released a Q&As on the adequacy decision.

Copyright © 2022, Hunton Andrews Kurth LLP. All Rights Reserved.National Law Review, Volume XI, Number 354
Advertisement
Advertisement
Advertisement
Advertisement
Advertisement
Advertisement

About this Author

In today’s digital economy, companies face unprecedented challenges in managing privacy and cybersecurity risks associated with the collection, use and disclosure of personal information about their customers and employees. The complex framework of global legal requirements impacting the collection, use and disclosure of personal information makes it imperative that modern businesses have a sophisticated understanding of the issues if they want to effectively compete in today’s economy.

Hunton Andrews Kurth LLP’s privacy and cybersecurity practice helps companies manage data and...

212 309 1223 direct
Advertisement
Advertisement
Advertisement