The European Data Protection Board has an opinion on the European Commission’s draft adequacy decision for the Republic of Korea. Some of the key takeaways include key areas of alignment between the EU and Korean data protection frameworks, including on core provisions such as data protection, legal grounds for processing, purpose limitation, data retention, transparency, and security and confidentiality of personal data. The EDPB also identified certain aspects of the Korean data protection framework that require further examination and clarification. Among others, what recommendations did the EDPB make to the European Commission?
