Republic of Korea: Personal Information Protection Commission concluded its review of Meta’s compliance with Personal Information Protection Act in relation to targeted advertising practices

Description

Personal Information Protection Commission concluded its review of Meta’s compliance with Personal Information Protection Act in relation to targeted advertising practices

On 10 December 2025, the Personal Information Protection Commission (PIPC) concluded the review of Meta's compliance with the order issued over the breach of the Personal Information Protection Act. In November 2024, the PIPC's investigation determined that Meta collected and utilised sensitive data without lawful consent, providing advertisers with insights into users' religious beliefs, political views, and sexual orientation, due to which Meta was fined KRW 21.6 billion. The PIPC confirmed that in response to the PIPC’s corrective order, Meta deleted options for sensitive-data-based targeted advertising.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
platform intermediary: user-generated content
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2024-11-05
in force

On 5 November 2024, the Personal Information Protection Commission (PIPC) issued a penalty surcharg…

2025-12-10
concluded

On 10 December 2025, the Personal Information Protection Commission (PIPC) concluded the review of …