Regulation 2 Adequate level of protection

(1)

For the purposes of Part 2 of the Data Protection Act 2018^f1 and the UK GDPR^f2, the Secretary of State specifies the Republic of Korea as ensuring an adequate level of protection of personal data^f3 for a transfer described in subsection (2).

(2)

A transfer described by this subsection is a transfer of personal data to a person in the Republic of Korea who is subject to the Personal Information Protection Act as that Act forms part of the law of the Republic of Korea and has effect from time to time^f4.

Annotations

Footnotes

f1: 2018 c. 12.
f2: The “UK GDPR” is defined in section 3(10) of the Data Protection Act 2018 (“the 2018 Act”).
f3: “Personal data” is defined in Article 4(1) of the UK GDPR and has the same meaning in Part 2 of the 2018 Act by virtue of section 5 of that Act.
f4: Electronic copies of this legislation can be obtained from www.gov.uk/government/publications/uk-data-adequacy-for-the-republic-of-korea-supporting-documents in English or Korean. Hard copies can also be inspected during office hours and free of charge at the offices of the Department for Digital, Culture, Media and Sport, 100 Parliament Street, London SW1A 2BQ.