Korea PIPA Article 34 personal information breach notification regime. Notification to data subjects without delay (typically interpreted as 72 hours per PIPC guidance) + categories + cause + countermeasures + contact + complaint avenues. PIPC notification within 72 hours for breaches affecting 1000+ data subjects + sensitive information + unique identifiers + high-risk. Article 34-2 (legacy public sector breach reporting + measures). Article 39 compensation for harm + Article 39-2 statutory damages up to 3M Korean won without proof of harm (consumer-friendly enforcement mechanism). Article 39-3 mandatory minimum insurance coverage OR reserves for controllers above certain thresholds processing sensitive or unique identifier information at scale (Korea-unique financial-resilience requirement). Article 39-4 punitive damages multiplier (added 2023) up to 5x for willful violations causing serious harm. Cross-references KISA Privacy Help Centre + 24/7 breach hotline + KrCERT/CC coordination.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.