PIPC Conducts Personal Data Self-Determination Rights Audit for AI Developers

The Personal Information Protection Commission is conducting an on-site inspection of IT companies to check whether the right to self-determination of personal information is guaranteed during the development process of generative artificial intelligence (AI). This is the first time an inspection regarding the right to self-determination of personal information has been conducted targeting generative AI developers.

According to the related industry on the 5th, the Personal Information Protection Commission has been conducting a preliminary on-site inspection since the end of last year on about 10 domestic and international IT companies, including Naver, Kakao, and Google, which possess generative AI, regarding the guarantee of the right to self-determination of personal information. The number of target companies is reported to be around 10.

This inspection looks into whether generative AI developers have properly guaranteed the right of original creators that their data will not be used for generative AI training. Various data are used in the development and training process of generative AI, and there have been concerns that data containing personal information may be used for generative AI training, potentially infringing on the right to self-determination of personal information.

The Personal Information Protection Commission views that many generative AI developers have not sufficiently established rights protection measures, and plans to analyze the inspection results and, referring to overseas cases, decide on improvements and recommendations.