New Compliance Requirement for Apps Using Sign in with Apple in Korea

Apple has introduced a new compliance requirement for developers in South Korea who use Sign in with Apple for account creation and management. This rule, effective from January 1, 2026, mandates that developers provide a server-to-server notification endpoint when registering or updating a Services ID linked to their apps. The move is part of Apple's ongoing effort to enhance user privacy and data protection.

What the New Requirement Means for Developers

Notification Endpoint for Account Changes

The new regulation requires developers to implement a server-to-server notification system that will alert them to crucial user account changes. These include:

• Modifications in email forwarding preferences.

• Account deletions within the app.

• Permanent deletions of Apple IDs.

The notifications will ensure that developers are promptly informed of these changes, allowing them to update user data and systems accordingly.

Timely Updates for Data Accuracy and User Control

Once a notification is received, developers must promptly adjust their app’s data and backend infrastructure to reflect the changes. For example, if a user disables email forwarding or changes their Apple ID, developers must modify the app’s records accordingly. Additionally, developers are required to inform users about any potential impacts, such as changes to billing, order tracking, or service delivery, as a result of account updates.

Apple's Documentation and Implementation Guidance

To assist developers in meeting these new requirements, Apple has referred them to specific technical resources, including the WWDC20 session "Get the Most out of Sign in with Apple" and Technical Note TN3194. These materials provide best practices for implementing the necessary infrastructure to handle account changes securely and efficiently.

ASOWorld First Order Discount

Get 50% off on your first order to start your app growth!

Promote Now Sign up with Google >

Impact of the New Rule on Privacy and Legal Compliance

Apple’s new rule aligns with South Korea's increasingly strict consumer data protection laws. It ensures that apps using Sign in with Apple adhere to evolving privacy regulations by guaranteeing that user data is updated immediately following any account change.

The requirement reflects Apple’s broader strategy to enhance transparency and user control over their personal data. It also aligns with Apple’s compliance efforts with global data protection standards, which are becoming more stringent across regions.

Importance of Legal Compliance

Developers must ensure that their app complies with applicable local laws, including those relating to data storage, retention, and handling of account deletions. Apple has stressed that legal compliance is a critical aspect of this process, and developers should consult legal counsel if they are unsure about their obligations.