MyData Environment, Implemented Across All Fields
The Personal Information Protection Commission will create an ecosystem to ensure that 'MyData,' which allows individuals to utilize their personal information as they wish, takes root in all sectors. It will also establish measures to minimize public concerns about privacy violations caused by artificial intelligence (AI). Additionally, the management and supervision system for the public sector will be comprehensively reorganized.
The Personal Information Protection Commission emphasized that public trust is a prerequisite for the successful establishment of the Digital Platform Government and leading the era of super-large AI, and on the 14th announced the 'Plan to Secure Public Trust for Data Innovation.'
Expansion of 'MyData' Managing Personal Information
With the amendment of the Personal Information Protection Act introducing the right to request the transfer of personal information, allowing citizens to proactively control and manage their data by transferring it to desired destinations, policies will be promoted to implement the MyData environment across all fields.
First, in the early stages of system introduction, key MyData infrastructure will be established, including detailed legal and institutional standards to guarantee the exercise of the right to request personal information transfer, online platforms that technically support the MyData usage process, and standardization for seamless data movement.
To activate the MyData ecosystem, leading services that citizens can tangibly experience will be rapidly promoted. Incentives such as fee systems will be designed to establish a virtuous cycle structure where data holders actively provide data. Furthermore, to secure the reliability, which is a success condition for MyData expansion, identification, authentication, and security systems will be established. Deceptive acts that subtly induce data transfer, such as dark patterns, will be blocked, and data leakage and falsification will be prevented through strict sanctions.
The Personal Information Protection Commission plans to establish the 'National MyData Innovation Promotion Strategy,' which contains specific MyData promotion directions, by June. A public-private consultative body involving private experts, industry, civic groups, and related ministries will be newly formed to lead broad social discussions, along with a working-level promotion team composed of experts from related ministries and public institutions to pursue consistent and balanced policies.
Protection Principles for Public Assurance in the Era of Super-large AI
The Personal Information Protection Commission will establish the 'AI Data Safe Utilization Policy Direction' by June this year, presenting protection principles and data processing standards to be observed throughout the entire AI process, including 'data collection-AI learning-service provision.' Especially since publicly disclosed information and user-generated data are frequently collected for AI learning, clear principles regarding this will be established. Additionally, standards for appropriate pseudonymization levels during AI learning will be presented, along with guidance on pseudonymization methods for unstructured data such as video and audio.
Meanwhile, with the amendment of the Personal Information Protection Act, when AI is used for recruitment interviews or determining welfare beneficiaries, which significantly affect citizens' rights or obligations, a new right has been established allowing individuals to refuse such decisions or request explanations. Before the enforcement in March next year, detailed procedures and methods for citizens to refuse or request explanations, and how to respond in such cases, will be concretized. Alongside this, reasonable regulatory systems will be prepared to protect data subjects' biometric information from high-risk technologies such as real-time facial recognition.
© The Asia Business Daily(www.asiae.co.kr). All rights reserved.
