Ruling party seeks stricter corporate penalties for customer data breaches

The Korean government and the ruling Democratic Party of Korea (DPK) are moving to advance a second revision of the country’s Personal Information Protection Act that would strengthen corporate liability for large-scale data breaches. The proposed amendment is intended to enhance compensation and relief for victims of large-scale data breaches. However, industry insiders warn that the measures could impose excessive burdens on companies. Discussions at the National Assembly are focusing on amendment bills introduced by several DPK lawmakers, political sources said Sunday. The proposals share a central provision: eliminating the requirement to prove “intent or negligence” in compensation claims stemming from cases of compromised user data, a change that would broaden corporate liability. The push for stricter liability follows a series of high-profile data breaches in Korea, including a recent case involving Coupang, the country’s largest e-commerce platform. Authorities said the incident may have exposed personal information linked to a large number of user accounts, intensifyin