Republic of Korea: Personal Information Protection Commission investigation into LG Uplus Corporation over alleged personal data breaches

Progress

Current status
under investigation
29 Jul 2026 under investigation
10 Sep 2025 under deliberation

Scope

Implementers
Republic of Korea
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
infrastructure provider: internet and telecom services
Government Branch
executive
Government Body
data protection authority
Implementation Level
national

Timeline of events

29 Jul 2026
under investigation

Personal Information Protection Commission referred LG Uplus Corporation to law enforcement over destruction of personal data breach evidence

On 29 July 2026, the Personal Information Protection Commission referred LG Uplus Corporation (LGU+) to law enforcement for investigation following its determination that the company obstructed official duties through evidence destruction and server…

Event type investigation
Action type interim ruling
Government branch executive
Government body data protection authority
10 Sep 2025
under deliberation

Personal Information Protection Commission opened investigation into LG Uplus Corporation over alleged personal data breaches

On 10 September 2025, the Personal Information Protection Commission (PIPC) announced the commencement of an investigation into and LG Uplus Corporation (LGU+) regarding alleged personal data breaches, following incidents involving unauthorised smal…

Event type investigation
Action type announcement
Government branch executive
Government body data protection authority