2023-05-24 08:34:09
At the general meeting of the Committee on the 24th, the Personal Information Protection Commission judged a total of 11 businesses, including business operators whose personal information was leaked due to neglect of safety measures, and business operators who restricted service subscription of information subjects who did not agree to the processing of personal information for public relations purposes. It was decided to impose a fine of 51.62 million won and a fine of 51 million won.
These operators are T Map Mobility Co., Ltd., Philip Morris Korea Co., Ltd., Green Car Co., Ltd., Chang Maru Co., Ltd., Pet Box Co., Ltd., Sicment Co., Ltd., Lara Job Co., Ltd., Marketing Ease Co., Ltd., Qoo10 Pte. Ltd., JT Communications Co., Ltd., Integration Co., Ltd., etc.
The Personal Information Commission initiated a fact-finding investigation in response to personal information leakage reports and personal information infringement reports. As a result of the investigation, it was found that 10 business operators violated safety measures and 1 business operator violated the method of obtaining consent.
Of the 10 operators that violated the safety measures, personal information was leaked from three operators, T Map Mobility Co., Ltd., Philip Morris Korea Co., Ltd., and Green Car Co., Ltd., due to internal factors such as system setting errors. It was confirmed that the duty of safety measures, such as access control, was neglected, and a fine was imposed.
In particular, a penalty of 51.62 million won was imposed on T-Map Mobility Co., Ltd., which leaked the personal information of 4,000 people due to a source code setting error.
In addition, personal information was leaked from 5 operators, Chang Maru Co., Ltd., Pet Box Co., Ltd., Chicment Co., Ltd., Lara Job Co., Ltd., and Marketing Ease Co., Ltd., and the Personal Information Commissioner confirmed that all of them neglected their safety measures and imposed sanctions such as corrective orders and fines for negligence.
And Qoo10 Pte. Ltd. and JT Communication Co., Ltd., a corrective order and the imposition of fines were resolved. On the other hand, a fine was imposed on Integration Co., Ltd., which operated a website so that information subjects who did not agree to the processing of personal information for public relations purposes might not sign up for the service.
Kim Hae-sook, Investigation Division 2 of the Personal Information Commission, said, “Recently, incidents in which personal information is leaked due to internal carelessness as well as illegal access from the outside such as hacking have occurred frequently.” We must take active measures to protect personal information, such as regular vulnerability checks and regular training for personal information handlers.”
1684920926
#Personal #Information #Protection #Commission #sanctioned #businesses #violated #Personal #Information #Protection #Act