We Welcome the Agreement to Improve Privacy Policy and Ensure Users’ Right of Access
– Lawsuit Against Google Concluded Through Settlement
A lawsuit filed by Korean human rights activists against Google LLC, seeking access to records of their personal data being disclosed to third parties such as intelligence agencies, has come to a close. The case began on July 24, 2014, in the wake of the U.S. National Security Agency (NSA)’s mass internet surveillance revelations. Six human rights activists affiliated with the Citizens’ Coalition for Economic Justice, Amnesty International Korea, Korean Progressive Network ‘Jinbonet’, and the Citizens’ Action Network filed a lawsuit against Google, demanding disclosure and access to records of whether their personal data had been shared with the NSA or other third parties. On June 2, 2025, the plaintiffs and Google reached an agreement through consultations on ways to improve the protection of Korean users’ personal data. Based on this agreement, both parties consented to a voluntary mediation at the Seoul High Court, thereby concluding the lawsuit.
Due to confidentiality obligations under U.S. law, it was not possible to confirm whether the plaintiffs’ personal data had been provided to U.S. intelligence agencies. However, the plaintiffs did receive personal data that was not subject to such confidentiality restrictions. Moreover, it is a meaningful outcome that Google agreed to improve its policies to better ensure Korean users’ right of access to their personal information. For more details, please refer to the press release below.
The impact of algorithms built by Big Tech companies using personal data is growing ever more significant—not only on democracy and human rights, but also on the economic order. In South Korea, concerns about the influence of YouTube’s personalized recommendation algorithms on democracy intensified during the recent period of martial law and presidential impeachment.
We urge the newly inaugurated government to pay close attention to the privacy policies of both domestic and global Big Tech companies and to take appropriate measures. We will continue our efforts to defend and promote digital rights.
[Press Release]
We Welcome the Agreement to Improve Privacy Policy and Ensure Users’ Right of Access
– Lawsuit Against Google Concluded Through Settlement –
- A lawsuit filed by Korean human rights activists against Google LLC, seeking access to records of their personal data being disclosed to third parties such as intelligence agencies, has been concluded through a settlement. On June 2, 2025, following the case’s remand from the Supreme Court, the plaintiffs and Google reached an agreement after discussions on a constructive resolution. Under the terms of the settlement, Google agreed to inform the plaintiffs of any disclosures of their personal data to third parties as required by the Supreme Court ruling. Furthermore, Google committed to taking additional steps to improve its privacy policy for Korean users.
- In June 2013, following Edward Snowden’s revelations of mass internet surveillance by the U.S. National Security Agency (NSA), six human rights activists affiliated with the Citizens’ Coalition for Economic Justice, Amnesty International Korea, Korean Progressive Network ‘Jinbonet’, and the Citizens’ Action Network filed a lawsuit against Google. They demanded access to and disclosure of any records indicating whether their personal data had been shared with the NSA or other third parties.
Ultimately, on April 13, 2023, the Supreme Court of Korea partially overturned the lower court’s ruling and remanded the case to the Seoul High Court (Supreme Court Decision 2017Da219232, April 13, 2023). The Court held that Google could not refuse users’ requests to access records of third-party disclosures of their personal data solely on the grounds that certain U.S. laws impose confidentiality obligations. It also determined that further deliberation was needed to clarify the scope in which such requests could be lawfully denied. - Following the remand, the plaintiffs and Google reached the following agreement with a view to proactively improving the substantive level of personal data protection for Korean users, taking into comprehensive consideration the scope of Google’s services and the differences between domestic and international personal data protection laws.
First, Google will fulfill its obligation, as confirmed by the Supreme Court ruling, to provide the plaintiffs with access to records indicating whether their personal data and service usage history were disclosed to third parties.
Second, Google will verify whether it has received any notification from U.S. government agencies or other relevant bodies indicating that confidentiality obligations under U.S. law have been lifted with respect to the plaintiffs, and will provide the plaintiffs with a written statement accordingly.
Third, within the limits of confidentiality obligations imposed by U.S. laws, Google has agreed to provide the following services for Korean users:
- Google will provide a personal data access web form page in Korean for users in Korea.
- Google will clearly inform Korean users on its Privacy Help Center page that access to records of third-party disclosures may be limited in cases where U.S. laws impose confidentiality obligations.
- When Korean users request access to records regarding the disclosure of their personal data to government agencies, Google will provide individualized responses regarding whether such disclosures occurred and whether the user was notified. Additionally, if users request confirmation of whether U.S. confidentiality obligations have been lifted, Google will provide individualized responses.
- Google will add detailed information on the purposes of data processing and the categories of data processed for each purpose in an additional privacy information page specifically for Korean users.
- Although certain aspects could not be confirmed due to confidentiality obligations under U.S. law—such as whether the plaintiffs’ personal data had been disclosed to U.S. intelligence agencies—it is a positive outcome that users will now have broader and more convenient access to records of third-party disclosures of their personal data in other cases. Furthermore, we expect that Google’s policy improvements will lead to stronger protection of Korean users’ rights.
June 2, 2025
Citizens’ Coalition for Economic Justice
Amnesty International Korea
Korean Progressive Network ‘Jinbonet’
Citizens’ Action Network
