PIPC enforcement actions under PIPA can trigger mandatory operational halts with fines up to $120M for non-compliant biometric deployments

Korea Personal Information Protection Commission enforcement actions under Personal Information Protection Act Article 75 allow fines of up to 3% of annual revenue for systemic violations. For Incheon Airport Authority, 3% of annual revenue equates to $80-120M fine exposure. PIPC has issued mandatory operational halt orders in two prior enforcement actions against large-scale personal data processors.