There is growing consensus that Coupang is unlikely to avoid the imposition of significant administrative fines following its large-scale personal data breach. With the number of affected individuals reaching approximately 34 million, and basic safeguards—such as proper management of former employee accounts—having not been adequately implemented, legal experts point to a strong likelihood of violations of data protection obligations.

The legal community further notes that, in addition to administrative penalties, criminal liability and civil damages claims may arise concurrently. Partner Shinyoung Choi emphasized that “given that the majority of Coupang’s revenue is generated in Korea and that it processes the personal data of Korean users, the Personal Information Protection Act applies regardless of the company’s place of incorporation,” adding that the statutory fine threshold of up to 3% of annual revenue should be applied strictly.

URL : "쿠팡 본사는 미국법인" 주장해도 과징금 못 피한다 - 파이낸셜뉴스