Apple Enhances User Privacy with New Developer Requirements in South Korea
Apple is strengthening user privacy protections for individuals in the Republic of Korea with new requirements for developers utilizing the “Sign In with Apple” feature. Effective January 1, 2026, developers based in South Korea will be required to implement a server-to-server notification endpoint when registering a new Services ID or updating an existing one to link their website to an app using Sign In with Apple.
What are Server-to-Server Notifications?
Registering a notification endpoint allows Apple to provide developers with crucial updates regarding user accounts and activity. These updates include:
- Changes to email forwarding preferences
- Account deletions within the app
- Permanent Apple Account deletions
These notifications are designed to ensure developers maintain accurate user data and promptly respond to user-initiated changes, ultimately giving individuals greater control over their personal information. Further details on server-to-server notifications can be found in the WWDC20 session 10173: Get the most out of Sign in with Apple.
Why are these changes being implemented?
The changes directly address user privacy and control over personal data. By requiring developers to promptly update their systems upon receiving notifications about account changes, Apple aims to create a more transparent and secure experience for its users. This includes ensuring displayed user data accurately reflects any changes, such as updated email addresses.
Guidance for Developers
Developers are advised to:
- Ensure displayed user data reflects account changes, particularly in account settings and user profiles.
- Provide direct links to the relevant page on their website where users can complete email address changes or verification processes.
- Keep users informed about how email forwarding changes may affect other services offered.
- For apps with In-App Purchases, clearly explain how billing, order tracking, and cancellations will be handled with a new email address.
- Adhere to all applicable legal requirements regarding data storage, retention, and handling of account changes and deletions, including local laws in the regions where their apps are available.
Apple Account Basics
An Apple Account is central to accessing Apple’s ecosystem of services, including the App Store, iCloud, Messages, the Apple Online Store, and FaceTime. It encompasses login credentials, contact information, payment details, and security settings. Users can manage their Apple Account through the official account.apple.com portal.
These new requirements underscore Apple’s ongoing commitment to user privacy and data security, particularly within the evolving regulatory landscape of the Republic of Korea.