Cycle on Oct 5, 2026

I'll start by reviewing the open threads and existing notes for this topic, then gather fresh evidence.

I have a clear picture: there's one open question thread (verify a reported ~US$49M PIPC fine on Meta), several one-shot watches to check (Australia bill, Coupang penalty, DeepSeek probe, China large-processor rules, Vietnam October NA session), and an ongoing Japan PPC watch. Last cycle ended Sept 28, so I need developments from Sept 28–Oct 5, 2026. Let me run parallel searches on the highest-priority items.

Major developments surfaced: the **Coupang penalty decision appears to have landed** (reports of a record ~₩624.7B / ~US$409M fine), there's a **Reuters report (Oct 4) of the Korean president ordering a probe into financial-industry data leaks**, the Meta fine question needs verification, and Australia's bill may have been introduced. Let me fetch the key sources.

Key confirmations: the Coupang fine landed (₩624.7B ≈ US$409M, record), and the datanews article shows the Meta claim in the question thread is a misreading — it explicitly states **no new Meta fine since Nov 2024**; the ~$49M figure matches the cumulative six-year total (₩72.96B across five fines) and the ~$668K Instagram figure matches the July 2023 Instagram fine (₩886M). Now let me verify the Coupang decision details from a stronger source, check the Australia bill status, and get the Vietnam session update.

The Coupang fine actually was announced **June 10–11, 2026** (Reuters/Bloomberg) — before the 10% ceiling took effect Sept 11 — so that watch has fired and I can record it. The PIPC also announced a new tiered investigation framework (Oct 2), and President Lee ordered a financial-sector leak probe (Oct 4). Vietnam's Standing Committee session agenda doesn't include the data bills — those go to the 16th NA's second session later in October. Now let me check the remaining watches: Australia bill status, DeepSeek probe, China large-processor rules, and Japan PPC rulemaking.

The search budget is spent, but I have solid evidence for the main items. The Japan PPC watch has an event: on **Oct 1, 2026** the PPC secretariat published its second "basic approach" paper on the amended APPI rules (statistics/AI exception, contractor duties, breach-reporting changes). Let me firm up two citations with fetches — the Coupang decision and the Australia ADM transparency guidance — before writing.

I now have solid evidence for all major items. Let me fetch the ppc.land article to ground the Japan citation properly.

The fetch timed out. Let me try once more; if it fails I'll cite the substantial article text already returned by the search result.

I have all the evidence gathered — now I'll record the watch events, resolve the Meta verification thread, and write the three note updates. First, the events and thread resolution:

Events recorded and the Meta thread resolved. Now the three note updates (Korea, Japan, Australia):

Two notes saved. The Australia note call was malformed — let me write it properly now:

All three notes are saved. One forward-looking item deserves its own watch: with the Coupang decision grandfathered under the old regime, the **first PIPA penalty decided under the new 10% turnover ceiling** is the next major Korea enforcement event to track. Let me register it, then close the cycle.

Cycle complete. Here's what this research cycle found and did: ## Key developments (Sept 28 – Oct 5, 2026) **🇰🇷 South Korea — Coupang watch resolved.** The record ₩624.7B (~US$409M) PIPC penalty on Coupang and Coupang Fulfillment Services was announced **June 10–11, 2026 — under the old penalty regime**, before the 10% turnover ceiling took effect Sept 11 (~1.4% of 2025 revenue, per Reuters). The decision included a ₩201.1B component for Coupang Partners' covert collection of 11.2M users' browsing data, a **criminal referral for deleting access logs six days after a preservation order**, and a finding that excluding the CPO from the internal investigation violated the legally mandated CPO independence. The first test of the 10% ceiling is still ahead — I registered a new tripwire watch for it. **🇰🇷 PIPC also overhauled its investigation process (Oct 2):** tiered deadlines (12/6/3 months by severity), expanded subcommittee authority, and — usefully for provisioning — publication of its fine-calculation standards. President Lee separately ordered a probe into financial-sector data leaks (Reuters, Oct 4). **🇯🇵 Japan — ongoing PPC watch event recorded.** On Oct 1 the PPC secretariat issued its 53-page second draft basic-approach paper on the APPI amendment rules: the statistics-creation/AI exception (consent-free scraping of public sensitive data, consent-free data sharing incl. "personally referable information," anti-model-restoration safeguards), a mandatory **single crawlable publication page** for data-sharing deals, a contractor scope duty with a contract-fix exemption (GDPR Art. 28(3)-modeled, requiring disclosure of offshore handling locations), and breach-reporting changes — including making **unlawful third-party transfers reportable with no 1,000-person threshold**. Final rules and guidelines still pending, so the watch stays open. **🇦🇺 Australia — concrete deadline added.** OAIC published final ADM transparency guidance Sept 30: from **December 10, 2026**, APP entities must disclose significant automated decision-making in privacy policies (APP 1.7/1.8), enforceable via civil penalties. The Tranche 2 bill is **not yet introduced** — that watch remains open. **✅ Meta fine claim debunked.** The reported ~$49M Meta / ~$668K Instagram PIPC fine is **not a new action** — it's a misreading of Meta's cumulative 2020–2024 fines (₩72.96B across five actions; the Instagram figure matches the July 2023 ₩886M fine). Datanews confirms no new Meta fine since Nov 2024. Thread resolved. **Still pending:** Vietnam's October NA session votes (Data Security Law + Penal Code amendments, watch fires Oct 31), DeepSeek/Moonshot CAC probe, China's large-processor rules, India Consent Manager registration (Nov 13), Indonesia GR 33/2026 (Jan 16, 2027).