South Korean privacy fines reach 1 trillion won amid stricter enforcement

South Korea's Personal Information Protection Commission has imposed nearly 1 trillion won in fines and penalties over the last three years due to violations of the Personal Information Protection Act. The total amount reached approximately 989.9 billion won, with a significant surge in enforcement noted in 2026 (as of August).

Coupang accounted for the largest portion of these penalties, totaling 626.3 billion won, which represents 63.6% of the total cumulative amount. Other major companies facing significant fines include SK Telecom (134.8 billion won) and KT (54 billion won).

The increase in penalties follows amendments to the Personal Information Protection Act, which raised the maximum fine for serious violations to as much as 10% of total revenue in cases of repeated intentional or gross negligence involving large-scale data breaches.

In response to these stricter regulations and the rise of AI and cloud computing, the security market is shifting toward new frameworks. Starting in 2027, listed companies will be required to disclose their information security investments and personnel status. This regulatory environment is driving demand for zero-trust security models and enhanced server and data center protections to manage data based on sensitivity levels.