Republic of Korea: Personal Information Protection Commission investigation into Salesforce over potential personal data protection vulnerabilities

Progress

Current status
under deliberation
11 Jun 2025 under deliberation

Scope

Implementers
Republic of Korea
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
infrastructure provider: cloud computing, storage and databases
Government Branch
executive
Government Body
data protection authority
Implementation Level
national

Timeline of events

11 Jun 2025
under deliberation

Personal Information Protection Commission opened investigation into Salesforce over potential personal data protection vulnerabilities

On 11 June 2025, the Personal Information Protection Commission (PIPC) announced a fact-finding procedure regarding potential personal data protection vulnerabilities associated with Salesforce. The PIPC commenced verification of related system secu…

Source
Event type investigation
Action type announcement
Government branch executive
Government body data protection authority