Christie's Fined KRW 287.2M by Korea PIPC for Data Breaches
Summary
The Personal Information Protection Commission imposed a fine of KRW 287.2 million on Christie's for data breaches. The enforcement action was taken on April 22, 2026. This marks a significant enforcement outcome for an international commercial entity under Korea's data protection framework, signalling continued regulatory attention on cross-border data handling practices.
International auction houses and luxury goods companies with Korean customer bases should review their personal data breach notification timelines and cross-border transfer mechanisms. PIPC enforcement against a named Western commercial entity suggests increased willingness to pursue foreign firms for data protection violations, not just domestic companies.
About this source
GovPing monitors Korea PIPC (EN alt) for new data privacy & cybersecurity regulatory changes. Every update since tracking began is archived, classified, and available as free RSS or email alerts — 3 changes logged to date.
What changed
The Personal Information Protection Commission imposed a fine of KRW 287.2 million on Christie's for data breaches. The enforcement represents one of the more substantial financial penalties issued by Korea's privacy regulator against a foreign commercial entity.
Companies operating in Korea that handle personal data, particularly international firms with significant Korean customer bases, should treat this enforcement as a signal to review their data breach notification procedures, incident response protocols, and cross-border data transfer safeguards under Korea's PIPA framework.
Penalties
KRW 287.2 million
Archived snapshot
Apr 23, 2026GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.
** This site is the official e-Government website of the Republic of Korea.
-
-
-
-
print share
Latest Photo News
| Title | The PIPC Sanctions Christie's for Data Breaches, Imposing KRW 287.2 million |
|---|---|
| Date | 2026.04.22 |
| Contents |
| Attachment |
Previous The PIPC Overhauls "Guidelines on Pseudonymization" by Introducing a Risk-Based Approach Next no data found Back to list
- Privacy Policy
- Location
- Sitemap
209 Sejong-daero, Jongno-gu, Seoul 03171, Korea
Copyright ⓒ Personal Information Protection Commission. All right reserved.
Parties
Related changes
Get daily alerts for Korea PIPC (EN alt)
Daily digest delivered to your inbox.
Free. Unsubscribe anytime.
About this page
Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission
Source document text, dates, docket IDs, and authority are extracted directly from PIPC.
The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.
Classification
Who this affects
Taxonomy
Browse Categories
Get alerts for this source
We'll email you when Korea PIPC (EN alt) publishes new changes.
Subscribed!
Optional. Filters your digest to exactly the updates that matter to you.