PIPC Concludes Coupang Personal Data Breach Investigation...Sanctions Decision as Early as June

The Personal Information Protection Commission has completed its investigation into the suspected personal data breach at Coupang and has sent a prior notice of disposition. The commission plans to decide on the level of sanctions as early as June.

Yonhap News

According to industry sources on May 11, the commission finished investigating the Coupang personal information leak incident and sent a prior notice to Coupang in early April, outlining violations of the Personal Information Protection Act and the planned sanctions.

According to the commission's regulations regarding investigations and dispositions, an investigator must send the party a prior notice of the planned disposition, based on the investigation report, and provide at least 14 days for the submission of opinions. The prior notice must include the facts that are the grounds for disposition, the details of the planned sanctions, the applicable laws, and the deadline for submitting opinions.

The commission is currently reviewing Coupang's written opinion. It is reported that Coupang expressed its disagreement with the overall direction of the commission’s planned sanctions in the submitted statement. The only remaining steps are the commission’s review of the opinion and deliberation at the plenary meeting.

The commission’s plenary meetings are scheduled for the 13th and 27th of this month, but it has been confirmed that this agenda item will not be discussed at the May 13 meeting. The commission aims to conclude the case within the first half of the year.

This content was produced with the assistance of AI translation services.