Republic of Korea: Issued ruling in PIPC Investigation into STG24 Co. over alleged violations of personal information protection regulations

On 24 April 2024, the Personal Information Protection Commission (PIPC) conducted its 7th plenary session, where it resolved to impose sanctions on six businesses for failing to adhere to the Personal Information Protection Act. The PIPC imposed a penalty of KRW 7.8 million and fines worth KRW 15.24 million on STG24 Co. for allegedly failing to manage online event data within its e-commerce platform. Due to improper management of homepage access information during an event, the company inadvertently exposed the details of some event winners to unauthorised parties, resulting in regulatory penalties.