In relation to Coupang’s massive data breach, legal experts have observed that avoiding the maximum level of administrative fines permitted under current law will be difficult. Given the failure to implement basic personal data protection measures—such as adequate control over former employee accounts—and the scale of harm affecting approximately 34 million individuals, it is unlikely that liability for breach of protection obligations can be avoided. Additionally, there is increasing analysis suggesting that administrative fines may be imposed alongside civil and criminal liabilities.

Partner Shinyoung Choi stated that “considering the scale of domestic revenue, the number of affected individuals, and delays in incident detection, it is necessary to apply the fine standard of up to 3% of revenue rigorously,” stressing that the fact that the parent company is incorporated in the United States does not provide a valid basis for avoiding regulatory sanctions.

URL : 쿠팡 '개인정보 유출' 과징금, 법조계 "최대 매출 3% 불가피" - 파이낸셜뉴스