Republic of Korea: Personal Information Protection Commission investigation into 2K Games' compliance with Personal Information Protection Act's security obligations

Progress

Current status
in force
11 Dec 2025 in force

Scope

Implementers
Republic of Korea
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
software provider: other software
Government Branch
executive
Government Body
data protection authority
Implementation Level
national

Timeline of events

11 Dec 2025
in force

Personal Information Protection Commission fined 2K Games KRW 217.1 million for noncompliance with security obligations

On 11 December 2025, the Personal Information Protection Commission (PIPC) fined 2K Games KRW 217.1 million for a personal information breach affecting approximately 12,906 domestic users. The breach, discovered around 28 September 2022, occurred af…

Source
Event type investigation
Action type ruling
Government branch executive
Government body data protection authority