Incident #9A6D26 · 11 SEP 2026notable
Claude privacy policy adds Korean identity verification and overseas transfer details
The Korea section now lists name, birthdate, sex, native-foreigner code and DI as collected for identity verification and fraud monitoring, kept until account deletion. This data goes to Persona in the US (kept 3 years), and Korea Credit Bureau is named as a delegatee. The firm assisting with domestic representative duties changed from Bae, Kim & Lee to Kim & Chang. The Korea addendum now prevails over the main policy for Korean users, and users may request that their data not be transferred overseas.
Taken from you
- The Korea section now lists sex, native-foreigner code and DI (duplication information) as data collected for identity verification and fraud monitoring.
- Data sent to Persona in the US and kept there for 3 years
- Opting out of overseas transfer may mean losing some or all services
Won back
- Clearer disclosure of delegatees, overseas recipients and retention periods
- Korean addendum takes precedence over the general policy if they conflict
- Stated right to request that data not be transferred overseas
Evidence · 4 of 4 quotes matched in source
Items of Data: Name, birthdate, sex, native-foreigner-code, and DI (duplication information)+ inserted · ✓ matched in source
Recipient’s Name (Contact Information): Persona (privacy@withpersona.com)+ inserted · ✓ matched in source
Period of Retention and Use by Recipient: 3 years+ inserted · ✓ matched in source
However, in doing so, Anthropic may not be able to provide you with all or any of the services we make available through our website.+ inserted · ✓ matched in source
Archived version ↗ · 454 words changed