The European Commission has proposed that the Council authorise the signing of an agreement with the Republic of Korea on transferring Passenger Name Record (PNR) data for counter-terrorism and serious crime purposes. The proposal, published on 24 July 2026, provides the legal basis for air carriers to transfer PNR data from the EU to the Korean Customs Service (KCS), the designated Korean competent authority. The agreement includes data protection safeguards such as a maximum five-year retention period, depersonalisation after six months, a prohibition on processing special categories of data, and prior judicial or independent body approval for disclosures within Korea or to third countries. Individuals are granted rights to access, correction, and redress. The substantive legal basis is Articles 16(2) and 87(2)(a) TFEU, with no budgetary implications for the Union budget.
The proposal follows negotiations that began on 17 December 2025, with lead negotiators initialling the text on 4 June 2026. The EU-Korea Summit on 10 June 2026 welcomed the conclusion of the negotiations. The agreement is designed to align with EU data protection standards and the Charter of Fundamental Rights, enabling data transfers while ensuring privacy protections. The Council is now asked to authorise the signing, after which the agreement would be concluded. The European Parliament will be consulted before final adoption. The agreement impacts air carriers, who must comply with transfer obligations, and passengers, whose data will be processed under strict safeguards. EU and Korean authorities gain a new tool for law enforcement cooperation, while privacy advocates may scrutinise the retention and transfer provisions. The Commission's proposal marks a step toward formalising the EU's PNR framework with a key Asian partner, following similar agreements with the United States, Canada, and Australia.