South Korea's privacy regulator is raising maximum data breach fines to 10% of revenue, up from 3%, effective immediately. Companies must notify users within 72 hours of potential data exposure, with penalties applied based on violation severity, intent, and damage scale.