A privacy fine just triggered a Congressional trade investigation. Then the President’s stock trades surfaced. South Korea’s PIPC imposed two separate fines on Coupang Inc. totalling ~$410 million: $278M for a November 2025 breach affecting 33.7 million users, and $132M…
Attackers exploited a third-party software vulnerability in KDDI’s shared email platform, potentially exposing login credentials of up to 14.22 million customers across six ISPs: STNet, JCOM, Chubu Telecom, NIFTY, BIGLOBE, and KDDI Web Communications. The breach was detected June 17…
The G7 DPA roundtable — hosted by CNIL in Paris during France’s G7 presidency — adopted two formal documents this week. The first: a declaration on privacy-preserving age assurance, establishing principles for robust, rights-respecting, and interoperable age verification across jurisdictions…
₩248 million. A separate fine, against a separate entity — and a fundamentally different set of violations. While South Korea’s record $409M penalty against Coupang focused on a breach affecting 37.5 million consumers, the PIPC’s action against Coupang Fulfillment Services…
€5 million. Tens of millions of patient records. And a compliance argument that failed at first contact with a regulator. France’s CNIL fined IQVIA Operations France for breaches in two health data warehouses — one fed by 14,000 pharmacies, one…
€18 million. Spain’s largest-ever privacy fine. For using data passengers already gave you — just not for this. Spain’s AEPD fined Amadeus IT Group for building a traveller-profiling system from historical booking data. The data was real. The consent wasn’t…
$409M. 37.5M users. One unrevoked key. South Korea just issued its largest-ever data protection fine — against Coupang, the country’s biggest e-commerce platform. What The Investigation Found • A former engineer who built Coupang’s authentication system stole the signing key before…
For organizations handling large-scale personal data, the compliance risk equation just changed dramatically. South Korea’s Personal Information Protection Commission (PIPC) announced a major enforcement shift focused on prevention-first compliance — while simultaneously increasing the maximum privacy penalty ceiling from 3%…
The UK ICO has fined South Staffordshire Water following a ransomware attack that exposed major failures in cybersecurity governance, monitoring, and data protection controls. What makes this case particularly serious is not just the breach itself — it’s how long…
$12.75 million penalty. Hundreds of thousands of drivers affected. Largest CCPA settlement in California history. General Motors is facing the consequences of treating connected vehicle data as a monetization asset instead of a regulated liability. California regulators allege GM collected…
