On 8 July 2026, the Bill amending the Personal Information Protection Act, including provisions on mandatory 5-times punitive damages for intentional data breaches, was introduced to the National Assembly. The Bill would apply to personal informatio…