Personal Information Protection Commission

2026 — Present

This issue tracks South Korea's legal and regulatory response to repeated large-scale personal data breaches. Reforms led by the Personal Information Protection Commission introduced the possibility of penalties of up to 10 percent of total revenue for certain repeated, intentional or grossly negligent serious privacy violations, while also providing incentives for preventive security investment and strengthening the responsibilities of corporate executives and privacy officers as well as notification and victim-remedy mechanisms.

2026 — Present

Tracks the May 2026 intrusion into TVING, the large-scale leak of account information and technical assets, subsequent regulatory investigations, the government's findings, and TVING's security and customer-compensation response.