Republic of Korea: Personal Information Protection Commission investigation into Shinhan Card over alleged unlawful sharing of merchant personal data
Progress
Current status
under deliberation
24 Dec 2025 under deliberation
Scope
Implementers
Republic of Korea
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
digital payment provider (incl. cryptocurrencies)
Government Branch
executive
Government Body
data protection authority
Implementation Level
national
Timeline of events
Personal Information Protection Commission announced investigation into Shinhan Card over alleged unlawful sharing of merchant personal data
On 24 December 2025, the Personal Information Protection Commission (PIPC) announced an investigation into Shinhan Card following a public interest whistleblower report. The report alleged that Shinhan Card unlawfully shared merchant personal data, …
SourceEvent type
investigation
Action type
announcement
Government branch
executive
Government body
data protection authority