South Korea : Towards a reversal of the burden of proof for customer data breach

Following a major cyberattack in December 2025 at South Korea’s e-commerce leader Coupang (2025 turnover: US$34.5 billion, up by 14%), which exposed the data of 65% of the local population i.e. 33.7 million customers, the government and the majority party (DPK) want to revise the personal data protection law for a second time in a row. The goal is to better protect victims of massive cyberattacks, in one of the world’s most advanced e-commerce markets, and to impose greater responsibility on co