Republic of Korea: Personal Information Protection Commission's investigation into SK Telecom's compliance with Personal Information Protection Act following data breach
Progress
Current status
concluded
13 May 2026 concluded
27 Aug 2025 in force
Scope
Implementers
Republic of Korea
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
infrastructure provider: internet and telecom services
Government Branch
executive
Government Body
data protection authority
Implementation Level
national
Timeline of events
Personal Information Protection Commission confirmed SK Telecom's security system implementation to remedy data breach
On 13 May 2026, the Personal Information Protection Commission reported that 211 of 222 corrective orders issued to data processors and businesses between July and December 2025 have been implemented or have implementation plans submitted. It stated…
Event type
investigation
Action type
closure
Government branch
executive
Government body
data protection authority
Personal Information Protection Commission imposed a KRW 134.791 billion fine and penalty of KRW 9.6 million on SK Telecom for violations of safety measures and data breach notification requirements
On 27 August 2025, the Personal Information Protection Commission adopted a decision to impose a fine of KRW 134.791 billion and a penalty of KRW 9.6 million on SK Telecom for violating the Personal Information Protection Act. The sanctions were imp…
Event type
investigation
Action type
ruling
Government branch
executive
Government body
data protection authority