[Editorial] Digital sovereignty

Every era has its own measure of sovereignty. Once it was tariffs. Then industrial subsidies. Today it is the authority to govern data. That is why South Korea's dispute with Washington over Coupang matters far beyond one company's privacy breach.

A domestic privacy case has become a diplomatic dispute, exposing a conflict between national legal authority and the political reach of multinational corporations.

Last week, the US House Judiciary Committee accused Seoul of discriminating against an American-owned company, and the White House echoed that claim. Neither government should allow a dispute over privacy enforcement to become a test of the alliance itself.

Seoul's legal case is straightforward. Authorities imposed a record 624.9 billion won ($409 million) penalty after a breach affecting more than 33 million users, roughly 68 percent of the country's population. Officials say the investigation and sanctions were carried out under Korean law without regard to nationality.

The Foreign Ministry said the congressional report relied heavily on Coupang's account while overlooking Seoul's explanation. The National Intelligence Service likewise rejected allegations that it coerced the company during the recovery of evidence from China, saying its role was consistent with Article 4 of the National Intelligence Service Act governing major cross-border data breaches.

The issue, then, is not Coupang's nationality but whether the law has been applied consistently. Korea has previously imposed comparable regulatory measures on domestic tech companies, including Naver, Kakao and SK Telecom, following serious failures to protect personal information.

If similar conduct attracts similar enforcement regardless of ownership, accusations of discrimination become considerably harder to sustain. Without that principle, digital sovereignty becomes difficult to defend.

It also shows how multinational corporations can move domestic regulatory disputes into the political institutions of their home country. Since the data leak emerged last November, Coupang's parent company has spent $1 million lobbying the White House, Congress and other policymakers.

The consequence is a change in venue. A consumer protection investigation has been recast as discrimination against US firms. Questions of data governance have migrated into trade policy and alliance management. Once that happens, political narratives begin to outweigh legal ones.

A multinational corporation can devote substantial resources to influencing policymakers in one capital. Governments must defend legal decisions while managing diplomacy, trade and security at the same time. By the time Seoul formally challenged the US House report's assertions, the issue had already become part of Washington's broader conversation about digital trade.

Privacy law may have started the dispute. Politics now shapes it.

The implications extend well beyond Coupang. Seoul and Washington are implementing a $350 billion investment framework while pursuing cooperation in defense industries. National security adviser Wi Sung-lac acknowledged that commercial frictions have complicated consultations, including those on nuclear-powered submarines and civilian nuclear cooperation.

One corporate dispute has begun to intrude on questions of regional deterrence and industrial cooperation. That alone suggests how readily commercial disagreements can spill into areas where the strategic costs are far greater than the original dispute.

There is a lesson here for both governments. Washington should be cautious about treating every complaint from a US multinational as evidence of foreign discrimination.

Seoul, meanwhile, should recognize that being legally correct does not guarantee being politically persuasive. It must explain not only its regulatory decisions but also the principles behind them. A structured dialogue on digital regulation would serve both governments better than public accusations.

The question is no longer whether Coupang deserved a fine. It is whether Korea's enforcement of privacy law can be recast as a geopolitical dispute through corporate lobbying in Washington. If that becomes the norm, digital sovereignty will exist more in theory than in practice.