Republic of Korea: Issued ruling in PIPC Investigation into Yanolja F&B Solutions Co. for alleged violations of personal information protection regulations

On 24 April 2024, the Personal Information Protection Commission (PIPC) conducted its 7th plenary session, where it resolved to impose sanctions on six businesses for failing to adhere to the Personal Information Protection Act. Yanolja F&B Solutions Co. faced penalties worth KRW 4.5 million and fines worth KRW 30.91 million for allegedly failing to protect customer data associated with the “Dodo Points” service. By erroneously configuring a cloud data storage system to allow public access, the company exposed the personal information of at least 794 customers, violating privacy regulations and incurring fines.