July 23, 2026 | Inquiry Closure | Data Governance

On 23 July 2026, the European Commission concluded its first review of the 2021 adequacy decision for the Republic of Korea, finding that the country continues to provide an adequate level of protection for personal data transferred from the European Union (EU). The review notes amendments to South Korean data protection law since the adoption of the adequacy decision, including changes relating to data subjects' rights. The report also sets out recommendations concerning South Korea's data protection framework, including with respect to transfers of personal data to third countries and enforcement.