Korea raises data breach fines to 10% of revenue

South Korea has raised maximum fines for major data breaches to 10% of annual revenue, up from 3%, effective September 10, 2026. Companies that leak personal data of 10 million or more people through intent or gross negligence can face these penalties, which aim to incentivize data protection as a preventive investment rather than a routine business cost. The new rules also require companies to notify users within 72 hours of a confirmed or high-risk data breach.