Upbit Obtains International Standard Personal Data Protection Certification... Secures All 4 ISO Types

Passed the Renewal Audit for Existing ISO 3 Types

[Asia Economy Reporter Minwoo Lee] Upbit, the largest cryptocurrency exchange in South Korea, has obtained the international standard personal information protection certification (ISO 27701).

Upbit's operator, Dunamu, announced on the 22nd that Upbit acquired 'ISO 27701' on the 17th, thereby holding all four ISO certifications.

'ISO 27701' is the most prestigious international standard certification in the field of personal information protection, established by the International Organization for Standardization (ISO). To obtain it, the personal information management procedures, encryption, anonymization, and all 49 management criteria across 8 areas required by the European General Data Protection Regulation (EU-GDPR) must be fully met. Once certified through the initial audit, a validity period of three years is granted, and annual follow-up audits are conducted during the validity period to maintain the certification.

Along with acquiring ‘ISO 27701’, Upbit also passed renewal audits for the three existing ISO certifications it held: ▲Information Security (ISO 27001), ▲Cloud Security (ISO 27017), and ▲Cloud Personal Information Security (ISO 27018).

Previously, Upbit became the first cryptocurrency exchange to secure ISO 27017 and ISO 27018 certifications along with the Information Security Management System (ISMS) by obtaining three ISO certifications in 2018. In September, it also acquired the 'Information Security and Personal Information Protection Management System Certification (ISMS-P)'.

A Dunamu official stated, "Since the launch of the service, Upbit has recognized the importance of information protection and personal information protection and has strived to establish an information protection system," adding, "We will build a world-class security system and lead as a more trusted digital asset exchange."