In brief
A Seoul court rejected Coupang’s injunction request in a case that stems from a massive data leak affecting more than 37 million users. The company’s fine of 423 billion won (US$315 million) remains in effect. The ruling confirms Korea’s strict data‑protection enforcement and highlights the potential damage and regulatory scrutiny faced by large tech firms.
A Seoul court on Thursday dismissed an injunction lawsuit filed by e‑commerce giant Coupang Corp., ending its attempt to overturn a 423‑billion‑won fine imposed by the Personal Information Protection Commission earlier this year.
The fine was the biggest ever handed out by the regulator for a single company. It was issued after investigators found that Coupang’s systems leaked personal data of more than 37 million users.
The Personal Information Protection Commission said the company violated privacy laws, including improperly handling names, phone numbers and delivery details. The fine could be as much as 3 percent of a company’s annual sales, and Coupang’s average revenue over the past three years was about 36 trillion won.
The Seoul Administrative Court ruled there was no ground for the fine to be annulled. It said the penalty had been properly calculated and enforced and that the court had no authority to reverse it.
After the breach was reported late last November, the case attracted international attention. U.S. officials and lawmakers questioned whether the Korean unit of the U.S.‑listed Coupang Inc. was treated fairly in the investigation.
This decision reinforces Korea’s rigorous application of data‑protection laws and signals that large technology companies can face substantial penalties for privacy violations.



