Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Naver Maps is the mapping platform from South Korean company Naver, embedded through a JavaScript API that sends visitor IP and location data to servers in South Korea.
Naver Maps is the mapping and location service operated by Naver, the largest internet company in South Korea. It is embedded through a JavaScript API and is commonly used on sites that target Korean audiences or display locations in Korea. Like other embedded maps, loading it causes the visitor browser to contact Naver servers directly.
When a Naver map loads, the browser sends the visitor IP address, the requested coordinates and technical details to Naver, and Naver may set cookies tied to its services. This data can identify or single out a visitor, so it is personal data under the GDPR.
Embedding Naver Maps places third party requests and possibly cookies on your page, which brings it within both the GDPR and the ePrivacy consent rule. You remain the controller for the decision to load the map, and Naver acts as a separate controller or processor for the data it receives.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Because the map sends personal data to a third party and may set cookies, you should obtain prior consent before it loads, typically through a click to load placeholder. Document the purpose clearly so visitors understand that a Korean provider will receive their request.
Naver processes the data in South Korea, which is outside the EEA. Importantly, South Korea benefits from a European Commission adequacy decision adopted in December 2021, so transfers to Naver in Korea are lawful without extra tools such as Standard Contractual Clauses, provided you still inform users and have a valid basis for the map itself.
Load Naver Maps behind consent, document the South Korea transfer and the adequacy decision in your privacy notice, and list any Naver cookies in your cookie policy. Where a Korea specific map is not essential, a European or self hosted map can simplify your compliance.
Websites using Naver Maps must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is advisable if Naver Maps is used for tracking user locations rather than a static display. The South Korea adequacy decision lowers the transfer risk, but you should still assess cookies, data minimisation and the necessity of the map.
Sample consent text
We use Naver Maps to show locations. Loading the map sends your IP address and request to Naver in South Korea. The map loads only after you accept.
Third-party domains contacted
maps.naver.comoapi.map.naver.compstatic.netCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| NNB | Analytics | About 1 year | Identifies the browser across Naver services and supports usage statistics. |
| NID_SES | Functional | Session | Maintains the Naver session state while interacting with Naver services. |
Naver Maps uses cookies for user preferences — inform visitors with a consent banner.
Yes, loading Naver Maps can set cookies associated with Naver services, in addition to sending the visitor IP address with each request. List any such cookies in your cookie policy.
Yes, because the map sends personal data to a third party and may set cookies, you should obtain prior consent, usually through a click to load placeholder, before the map loads.
The most defensible basis is consent under Article 6(1)(a) of the GDPR, combined with the ePrivacy consent requirement for any cookies. Legitimate interest is harder to justify for a non essential embedded map.
Yes, data goes to South Korea. South Korea has an EU adequacy decision from December 2021, so the transfer is lawful without Standard Contractual Clauses, but you must still inform users.
A static map rarely requires a DPIA, but tracking user positions or combining the map with profiling may. The Korean adequacy decision reduces the transfer risk in your assessment.
Use a consent gate, disclose the South Korea transfer and adequacy decision, list the cookies and minimise the data you pass to the map. Provide a fallback for users who decline.
For non Korean audiences, European or self hosted maps such as Leaflet with OpenStreetMap, MapLibre or a European provider avoid the international transfer entirely. Naver remains the natural choice for Korea focused content.
List the Naver cookies with their purpose and duration, state that the map loads only after consent and disclose the transfer to South Korea under the adequacy decision. Update it if Naver changes its cookies.