Defendant

A shall be punished by a fine of KRW 5 million and by a fine of KRW 700,000,000.

The above fines are imposed by the Defendants.

Punishment of the crime

Defendant

B is the owner of Saly C and D, and the defendant A is the employee of the above main office.

Defendant

A No person who manages or has processed a personal information shall divulge personal information he/she becomes aware of in the course of his/her duties or provide it to another person without authority.

Nevertheless, the Defendant, at around 20:00 on September 6, 2019, worked as an employee at the above main point, and managed the equipment “CCTV” at around 01:00 on the same day, operated the said equipment with F, G, who was an employee of F, who was able to listen to the said equipment, thereby reproducing the CCTV images of which the face of E and H, who is his/her driving, was exposed to a smartphone, and then transmitted the said image taken by G with a smartphone, and then sent it to the people, such as F, J, K, and L.

Accordingly, the defendant, who managed personal information, divulged personal information that he became aware of in the course of his duties.

Defendant

B An operator of image data processing equipment shall take technical, administrative and physical measures necessary for securing safety, such as formulation of an internal management plan and keeping access records, as prescribed by Presidential Decree, so that personal information is not lost, stolen, leaked, forged, altered, or damaged, and shall not be lost, stolen, leaked, forged, altered, or damaged without taking such measures.

Nevertheless, the Defendant did not install a password on CCTV devices installed at the time and place specified in Paragraph 1, and did not take measures to control access to and restrict access to the images taken by the said devices, thereby allowing A to transmit the CCTV images the face of E and H, as described in Paragraph 1, to the visitors.

Accordingly, the defendant will take necessary measures to ensure safety so that personal information is not leaked as an operator of image data processing equipment.