Republic of Korea: Personal Information Protection Commission investigation into SK Telecom's compliance with Personal Information Protection Act following data breach

Progress

Current status
in force
27 Aug 2025 in force

Scope

Implementers
Republic of Korea
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
infrastructure provider: internet and telecom services
Government Branch
executive
Government Body
data protection authority
Implementation Level
national

Timeline of events

27 Aug 2025
in force

Personal Information Protection Commission imposed a KRW 134.791 billion fine and penalty of KRW 9.6 million on SK Telecom for violations of safety measures and data breach notification requirements

On 27 August 2025, the Personal Information Protection Commission adopted a decision to impose a fine of KRW 134.791 billion and a penalty of KRW 9.6 million on SK Telecom for violating the Personal Information Protection Act. The sanctions were imp…

Source
Event type investigation
Action type ruling
Government branch executive
Government body data protection authority