Bithumb fined $136,000: Data privacy violation and new regulations for blockchain companies in South Korea
South Korea's Personal Information Protection Commission (PIPC) has made a historic decision, fining the largest cryptocurrency exchange Bithumb 210 million won (approximately $136,000). The reason is the illegal transfer of users' personal data to foreign platforms without their proper consent. This is not just a fine, but a signal to the entire crypto sector: the era of careless handling of client privacy is coming to an end.
The inspection revealed two serious violations. First, Bithumb obtained user consent to transfer data to the Stellar exchange, but actually sent the information to a platform operated by BingX. Users essentially gave consent to one recipient, but the data went to a completely different one. Second, the exchange transferred clients' names, wallet addresses, and dates of birth to 13 foreign exchanges without obtaining any permission at all.
It is important to understand that this story goes far beyond a single fine. The PIPC simultaneously published a separate data protection guide for blockchain companies, taking into account the specifics of the technology—transparency, distributed structure, and immutability of records. The regulator clearly stated: personal data that allows identifying a person (e.g., names and social security numbers) should not be recorded on the blockchain. This is a fundamental requirement that redefines the rules of the game for all DeFi projects and centralized exchanges operating under South Korean jurisdiction.
Cryptalist Analysis: What Does This Mean for the Market?
From my point of view, this decision is a wake-up call for the entire industry. South Korea, being one of the most active crypto markets, is beginning to strictly regulate not only financial but also information flows. For Bithumb, this fine is just the tip of the iceberg. The company will have to completely overhaul its data transfer protocols and possibly incur additional audit costs. For investors, this is a signal: when choosing an exchange, pay attention not only to liquidity but also to its compliance policy. Those who ignore data protection risk facing consequences far more serious than $136,000.