South Korea Ties Fines to Prevention

South Korea's privacy regulator will enforce higher breach penalties and 72-hour potential-exposure notifications nationwide from September 11, 2026.

South Korea's privacy regulator began enforcing revised breach rules Friday, allowing fines of up to 10 percent of revenue for severe data violations in South Korea.

South Korea's Personal Information Protection Commission plans in the second half of 2026 to tie privacy fines and breach liability to documented prevention and response practices nationwide.

South Korea's National Assembly passes PIPA amendments on February 12 2026 authorizing fines up to 10 percent of revenue for high severity data breaches.