South Korea Ties Fines to Prevention

South Korea is tightening personal-data breach enforcement through revised Personal Information Protection Act provisions that can impose fines of up to 10% of revenue for severe or repeated violations.

The framework also requires notification within 72 hours when high-risk exposure is likely, expands responsibility for senior privacy officials, and allows reductions tied to sustained privacy investment and effective response. A related Personal Information Protection Commission work plan would extend this approach through continuous prevention, targeted inspections, testing, and victim-relief measures.