Republic of Korea: Personal Information Protection Commission investigation into Meta for alleged unlawful collection and use of sensitive user data

Progress

Current status
concluded
10 Dec 2025 concluded
05 Nov 2024 in force

Scope

Implementers
Republic of Korea
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
platform intermediary: user-generated content
Government Branch
executive
Government Body
data protection authority
Implementation Level
national

Timeline of events

10 Dec 2025
concluded

Personal Information Protection Commission concluded its review of Meta’s compliance with Personal Information Protection Act in relation to targeted advertising practices

On 10 December 2025, the Personal Information Protection Commission (PIPC) concluded the review of Meta's compliance with the order issued over the breach of the Personal Information Protection Act. In November 2024, the PIPC's investigation determi…

Source
Event type investigation
Action type closure
Government branch executive
Government body data protection authority
05 Nov 2024
in force

Personal Information Protection Commission fined Meta KRW 21.6 billion for alleged unlawful collection and use of sensitive user data

On 5 November 2024, the Personal Information Protection Commission (PIPC) issued a penalty surcharge and administrative fine of KRW 21.6 billion (equivalent to USD 15.7 million) against Meta Platforms for its breaches of the Personal Information Pro…

Source
Event type investigation
Action type ruling
Government branch executive
Government body data protection authority