Date: 2023-03-23Category: Not ApplicableState: Union GovernmentCountry: Europe
Decision of the EEA Joint Committee No 219/2022 of 8 July 2022 amending Annex XI (Electronic communication, audiovisual services and information society) to the EEA Agreement [2023/636]
**Policy Summary:**
EEA Joint Committee Decision No. 219/2022, adopted on July 8, 2022, amends Annex XI (Electronic communication, audiovisual services and information society) to the Agreement on the European Economic Area (EEA). The decision incorporates Commission Implementing Decision (EU) 2022/254 of December 17, 2021, which pertains to the adequate protection of personal data by the Republic of Korea under its Personal Information Protection Act, into the EEA Agreement. This incorporation follows the existing integration of Regulation (EU) 2016/679 (the GDPR) into the EEA Agreement and the application of Implementing Decision (EU) 2022/254 by Iceland, Liechtenstein, and Norway in alignment with EU Member States. The amendment adds point 5eu, referencing "32022 D 0254: Commission Implementing Decision (EU) 2022/254," to Annex XI of the EEA Agreement. The authentic Icelandic and Norwegian language texts of Implementing Decision (EU) 2022/254 will be published in the EEA Supplement to the Official Journal of the European Union. The decision entered into force on July 9, 2022, following the completion of notifications under Article 103(1) of the EEA Agreement and will be published in the EEA Section of, and in the EEA Supplement to, the Official Journal of the European Union.
Key Entities Referenced
EEA Joint Committee: The governing body responsible for managing the Agreement on the European Economic Area (EEA).
EEA Agreement: The Agreement on the European Economic Area, which extends the EU's single market to Iceland, Liechtenstein and Norway.
Annex XI Electronic communication, audiovisual services and information society: An annex to the EEA Agreement that deals with electronic communication, audiovisual services and information society matters.
Commission Implementing Decision EU 2022/254: A decision by the European Commission regarding the adequate protection of personal data by the Republic of Korea.
Regulation EU 2016/679: Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, also known as the General Data Protection Regulation (GDPR).
European Parliament: The legislative branch of the European Union.
Republic of Korea: A sovereign state in East Asia, also referred to as South Korea. The decision concerns the protection of personal data transferred to this country.
Iceland: A Nordic island country in the North Atlantic. It is part of the EEA.
23.3.2023 EN Official Journal of the European Union L 85/35
DECISION OF THE EEA JOINT COMMITTEE No 219/2022
of 8 July 2022
amending Annex XI (Electronic communication, audiovisual services and information society) to the
EEA Agreement [2023/636]
THE EEA JOINT COMMITTEE,
Having regard to the Agreement on the European Economic Area (“the EEA Agreement”), and in particular Article 98
thereof,
Whereas:
(1) Commission Implementing Decision (EU) 2022/254 of 17 December 2021pursuant to Regulation (EU) 2016/679
of the European Parliament and of the Council on the adequate protection of personal data by the Republic of
Korea under the Personal Information Protection Act(1)is to be incorporated into the EEA Agreement.
(2) Regulation (EU) 2016/679 of the European Parliament and of the Council(2) was incorporated into the EEA
Agreement by Decision of the EEA Joint Committee No 154/2018(3). Pursuant to adaptation (e) to Regulation
(EU) 2016/679 in point 5e of Annex XI to the EEA Agreement, Iceland, Liechtenstein and Norway have applied the
measures contained in Implementing Decision (EU) 2022/254 at the same time as the EU Member States.
(3) Annex XI to the EEA Agreement should therefore be amended accordingly,
HAS ADOPTED THIS DECISION:
Article 1
The following point is inserted after point 5et (Commission Implementing Decision (EU) 2021/1772) of Annex XI to the
EEA Agreement:
‘5eu. 32022 D 0254: Commission Implementing Decision (EU) 2022/254 of 17 December 2021pursuant to Regulation
(EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by the
Republic of Korea under the Personal Information Protection Act (OJ L 44, 24.2.2022, p. 1).’
Article 2
The text of Implementing Decision (EU) 2022/254 in the Icelandic and Norwegian languages, to be published in the EEA
Supplement to the Official Journal of the European Union, shall be authentic.
Article 3
This Decision shall enter into force on 9 July 2022, provided that all the notifications under Article 103(1) of the EEA
Agreement have been made*.
Article 4
This Decision shall be published in the EEA Section of, and in the EEA Supplement to, the Official Journal of the European
Union.
(1) OJ L 44, 24.2.2022, p. 1.
(2) OJ L 119, 4.5.2016, p. 1.
(3) OJ L 183, 19.7.2018, p. 23.
(*) No constitutional requirements indicated.L 85/36 EN Official Journal of the European Union 23.3.2023
Done at Brussels, 8 July 2022.
For the EEA Joint Committee
The President
Kristján Andri STEFÁNSSON