The state-run Personal Information Protection Commission (PIPC) seeks to impose a penalty surcharge of up to ten percent of corporate sales for massive, repeated data leaks.

While briefing the president on its operations on Friday, the data protection authority said it plans to introduce special provisions to apply such surcharges to businesses that have suffered data breaches repeatedly or on a large scale.

The plan follows massive data breaches at e-commerce giant Coupang and at mobile carriers SKT and KT.

To enable affected users to seek financial compensation, the PIPC will add "damages" as a condition for class-action lawsuits under the Personal Information Protection Act.

Article 51 of the Personal Information Protection Act addresses class action lawsuits, but it allows only suits to block infringing acts and does not permit claims for damages.