Coupang given 7 days to fix data-breach notices, South Korean privacy watchdog says
( December 3, 2025, 02:45 GMT | Official Statement) -- MLex Summary: Coupang was ordered on Wednesday by South Korea’s privacy regulator to overhaul how it notifies customers about its recent data breach affecting some 33.7 million records, after the company characterized the incident as a mere “exposure” and left out key items in its notices. The Personal Information Protection Commission told Coupang to reissue notifications describing the incident as a “breach,” explicitly include all compromised data and keep the notice prominently posted on its website via the main page or pop-ups for a meaningful period. Coupang must also actively guide users on damage-limitation steps, such as changing common-entrance and account passwords, while strengthening its internal response, expanding its dedicated help desk and reacting quickly to complaints and media reports. The company has seven days to report on how it has implemented the measures, and the regulator said it will continue investigating the scale and causes of the breach, while separately running a three-month crackdown on data leaks and illegal circulation of personal information online.The statement, in Korean, is attached....
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
Curated case files bringing together news, analysis and source documents in a single timeline