Last review date: 1 January 2025
Yes
Other laws that may require the retention and storage of personal data (including, for example, where such data is part of another type of record or dataset) in the local jurisdiction or otherwise prohibit the transfer or disclosure of the personal data outside of the local jurisdiction:
☒ tax or financial record laws
Financial companies or electronic financial businesses (excluding domestic branches of foreign financial companies and electronic payment settlement agencies for overseas cybermalls that do not significantly affect the security and reliability of electronic financial transactions) must maintain their information processing systems that handle personally identifiable information or personal credit information within Korea (Electronic Financial Supervision Regulation, Article 14-2(8)).
Last review date: 1 January 2025
☒ Obligation for public sector organizations to share or make accessible non-personal data
- The Public Data Act imposes an obligation on public sector bodies to share or make accessible data they create or acquire for public purposes, with some exceptions for confidential information.
- Public bodies must register a list of their public data with MOIS, on the basis of which the Open Data Strategy Council determines and publishes the list of public data to be made accessible.
- Public bodies are required to make their public data available in machine-readable formats and to establish IT-based methods for the public to access and use it.
While the Public Data Act requires public bodies to share the non-personal data they hold to facilitate use by the private sector, it does not impose any data sharing obligations on private organizations.