[Consultation] Compliance Matters for Personal Information Storage in Domestic and Foreign Clouds

Law firm Veat received a referral from A, a company providing medical services, to conduct a legal review regarding compliance requirements when storing personal information in domestic and foreign cloud environments.

A requested a review regarding compliance requirements when storing personal information in domestic and foreign cloud environments. Accordingly, Law firm Veat conducted a legal review under the “Personal Information Protection Act” and the “Act on Promotion of Information and Communications Network Utilization and Protection of Information” (Information Network Act) regarding whether A can store personal information in domestic and foreign cloud environments, and if so, the procedures A must undertake to store personal information in foreign cloud environments.

Cloud services allow you to store and process vast amounts of data simply by having an internet connection, making it one of the services widely used by many companies. However, to move personal information from domestic cloud environments to foreign cloud environments, you must confirm the contents stipulated in the Personal Information Protection Act and the Information Network Act, such as customer consent related to personal information overseas transfer and relevant procedures.

Law firm Veat provides corporate-usable personal information guidelines related to personal information storage and overseas transfer of personal information. If you need advice on legal issues related to personal information, including compliance requirements when storing personal information in domestic and foreign cloud environments, please feel free to contact Law firm Veat at any time.

Thank you.
Law firm Veat