Latest / Media, elections and online safety
South Korea’s privacy regulator fines OpenAI 3.6 million won over ChatGPT data leak
See how this story connectsSouth Korea’s Personal Information Protection Commission fined OpenAI 3.6 million won (about $3,000) on 26 July 2023 for failing to meet breach-notification duties after a bug in an open-source cache library exposed ChatGPT Plus subscribers’ names, email addresses and partial payment details between 20 and 21 March 2023. The exposure affected 687 Korean users. The commission also issued improvement recommendations, a formal measure under the Act, calling on OpenAI to prevent a repeat, comply with the Personal Information Protection Act and cooperate with its future monitoring of AI services.
Why it matters
OpenAI and other foreign chatbot providers learned that Korea’s privacy regulator would apply the Personal Information Protection Act to generative AI services and their breach notices.
- When
- 26 Jul 2023
- ID
WTA-N-2023-0163- Where
- South Korea
- Who
- Personal Information Protection Commission, OpenAI
- Topics
- Privacy, AI incidents, Frontier models
- Authority
- Personal Information Protection Commission (South Korea)
- Target
- OpenAI
- Action
- fine; 3.6 million won (imposed)
- Status
- imposed · Enforcement ledger
Summary by wheresthe.ai, from Asia IP and the reporting credited above. We could not open the primary document, so it is marked Reported. Checked against the source on 9 Oct 2026.
Source copy: download the page as saved on 18 Oct 2026 (PDF). Also held by the Internet Archive.
Cite this story
WTA-N-2023-0163: “South Korea’s privacy regulator fines OpenAI 3.6 million won over ChatGPT data leak.” wheresthe.ai, 26 Jul 2023. https://wheresthe.ai/d/kr-pipc-openai-fine-chatgpt-leak-2023-07/ (source: Asia IP: South Korea’s PIPC imposes administrative sanctions on OpenAI).
Spotted an error? Email [email protected].