Restaurant apps, franchisors fined in South Korea over privacy lapses
( February 12, 2026, 03:14 GMT | Official Statement) -- MLex Summary: Food-and-beverage restaurant booking and queue-management platforms and major franchisors were sanctioned by South Korea’s privacy watchdog after a sweep found routine failures to delete personal data once retention periods lapsed or processing purposes ended, as well as marketing use without consent and unlawful handling of data tied to users under 14 without a legal guardian’s consent. The Personal Information Protection Commission imposed fines totaling about 1.6 billion won ($1.1 million) on WAD, Tabling, Yanolja F&B Solution, SCK Company, BKR, MGC Global, McDonald’s Korea, Twosome Place, Ediya and The Born Korea, alongside corrective orders and public disclosure orders. BKR, which runs Burger King in South Korea, drew a 924 million won fine over under-14 data, while MGC Global, the operator of Mega MGC Coffee, was fined 642 million won for using member data beyond its stated purpose. The watchdog also flagged weak access controls, including API design and operational shortcomings, at several platforms and franchise operators.Statement is attached (in Korean)....
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
Curated case files bringing together news, analysis and source documents in a single timeline