The country's Personal Information Protection Commission, launched in August this year, said in a statement it fined Facebook after a probe found that the personal information of least 3.3 million of the 18 million Facebook users in Korea were provided to operators other than Facebook without their knowledge, from May 2012 to June 2018.
The commission said "A user agreed to share their information with a particular service when they logged in with their Facebook accounts. However, the user's friends didn't, and they were unaware that their data were also being shared,"
The commission has also fined them for obstructions that made determining the precise scope of the company's violations difficult and hampered investigations
Some of them are:
Facebook also stored user password data without encryption, and didn't regularly notify users when the company accessed their data, turned in false or incomplete documents during the investigation.