Korean Bar Association Issues Rare Statement on 'SKT USIM Incident': "A Constitutional Violation of Personal Information"

Korean Bar Association Criticizes SKT's Inadequate Response Despite Concerns Over Secondary Damage
Calls for Accountability and Compensation

Kim Jungwook, President of the Korean Bar Association, is being interviewed by Asia Economy at the Bar Association office in Seocho-gu, Seoul. Photo by Jo Yongjun

The Korean Bar Association (President Kim Jungwook) issued an unusual statement on April 30 regarding the 'SK Telecom USIM incident,' declaring, "This is not merely a corporate security breach, but a serious case in which the constitutional right of citizens to informational self-determination has been violated."

The association criticized SKT's response as severely inadequate. It pointed out that public notification was made only several days after the incident was recognized, and only through limited channels, which exacerbated confusion within the government and across society. The association stated, "The reason corporate personal information leaks continue to recur is that the cost of managing and protecting personal information is greater than the amount companies are required to compensate victims after an incident." It also cited the imposition of punitive damages in other countries as an alternative to address this issue.

The association asserted, "Given the gravity of citizens' personal information, companies must be held liable for substantial punitive damages in the event of a data breach." It further recommended that SKT transparently disclose all facts and provide a comprehensive USIM protection service to all users. In addition, it called for the government to form a joint investigation team to thoroughly examine the causes, responsibility, and any cover-up related to the incident. The association also urged the National Assembly to introduce a punitive damages system through legislation.