European Commission 23 July 2026, COMMISSION STAFF WORKING DOCUMENT Accompanying the document REPORT FROM THE COMMISSION TO THE EUROPEAN PARLIAMENT AND THE COUNCIL on the first review of the functioning of the adequacy decision for the Republic of Korea

Also known as

This Commission Staff Working Document evaluates the first review of the 2021 adequacy decision for the Republic of Korea, confirming that the country maintains an adequate level of personal data protection under the Personal Information Protection Act (PIPA). The report highlights significant legislative strengthening through the 2023 and 2025 PIPA amendments, which enhanced data subject rights, tightened rules on international transfers, and expanded the oversight powers of the Personal Information Protection Commission (PIPC). Consequently, the Commission concludes that the Korean legal framework remains aligned with Union standards, allowing for the revocation of certain supplementary rules that have since been codified into general law.AI