The European Commission has maintained its adequacy decision regarding the level of personal data protection in South Korea, following its first periodic review.

The South Korean Personal Information Protection Commission (PIPC) stated that the European Commission has confirmed the maintenance of its adequacy decision for South Korea. This confirmation follows the first review conducted since the initial decision in December 2021. The review focused on the legal framework, the oversight system, and access to data by public authorities, concluding that the country continues to ensure a high level of protection. The European Commission notably emphasized that amendments to the Personal Information Protection Act have contributed to greater alignment with the GDPR.

Thanks to this decision, South Korean companies and research organizations can continue to receive personal data from the European Union without additional measures. The data transfer framework between the two regions, which includes a recognition of equivalence until September 2025 for transfers from Korea to the EU, is thus secured. The PIPC chairperson stated that this outcome confirms the high level of international trust granted to the country's data protection system and reiterated the commitment to support the use of data globally while protecting citizens' information.