← back to vpnet
South Korea Sets Data Breach Fines at 10% of Revenue, Not Profit
South Korea's revised Personal Information Protection Act took effect on September 11, and the maximum penalty for a data breach is now 10% of a company's total revenue, up from an old cap of 3% of sales. We walk through the three triggers, the 40% reduction available for documented prevention spending, and the new 72 hour notification clock in the full breakdown: https://s.vp.net/s4DcO
9/14/2026, 1:14:35 PM