Republic of Korea: Personal Information Protection Commission announced investigation into Shinhan Card over alleged unlawful sharing of merchant personal data

Description

Personal Information Protection Commission announced investigation into Shinhan Card over alleged unlawful sharing of merchant personal data

On 24 December 2025, the Personal Information Protection Commission (PIPC) announced an investigation into Shinhan Card following a public interest whistleblower report. The report alleged that Shinhan Card unlawfully shared merchant personal data, …

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
digital payment provider (incl. cryptocurrencies)
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2025-12-24
under deliberation

On 24 December 2025, the Personal Information Protection Commission (PIPC) announced an investigati…