AI vendors based in South Korea
AI vendors based in South Korea. Subject to the Personal Information Protection Act (PIPA) and an EU adequacy decision, with mature regulatory enforcement.
South Korea-based AI vendors operate under the Personal Information Protection Act (PIPA, 2011, amended 2020), regulated by the Personal Information Protection Commission (PIPC). South Korea has held an EU adequacy decision since December 2021, enabling free flow of EU personal data. PIPA is among the strictest privacy regimes in Asia, with significant administrative fines and a private right of action.
Buyer considerations
- EU adequacy decision in place — favorable for EU buyers.
- PIPA imposes specific consent requirements that may be stricter than GDPR for some processing.
- Cross-border transfer notification requirements apply for many data flows.
- AI Framework Act (2024) added obligations for high-impact AI systems.