"Opening an Era of Safe AI for Personal Information"... Personal Information Protection Commission to Pursue 6 Major Tasks This Year

Preparing '6 Major Guidelines' for AI Environment Application
Policy Promotion to Realize a Safe AI Era for Personal Information

Chairman Ko Hak-su of the Personal Information Protection Commission is announcing the "2024 Major Policy Promotion Plan of the Personal Information Protection Commission" on the afternoon of the 15th at the Government Seoul Office in Jongno-gu, Seoul. [Photo by Personal Information Protection Commission]

The Personal Information Protection Commission (PIPC) has decided to establish step-by-step guidelines for data collection, learning, and services in line with the era of artificial intelligence (AI). A ‘prior appropriateness review system’ will be implemented, exempting administrative sanctions if compliance measures with PIPC and personal information laws are prepared and followed during the development of AI models or services. A regulatory sandbox allowing the use of original video information based on personal information safety measures and a personal information safe zone supporting flexible personal information processing will also be operated.

On the 16th, the PIPC announced the ‘Six Core Promotion Tasks for 2024,’ which include ▲creating conditions for trustworthy AI growth ▲laying the foundation for the expansion of MyData (personal credit information management) that citizens can feel ▲establishing a personal information protection system that ensures everyday safety ▲strengthening the rights and interests of data subjects in the digital era ▲creating and spreading a personal information ecosystem that supports the data economy ▲leading the formation of global personal information norms.

First, to activate AI-based data, the PIPC plans to newly establish six step-by-step AI guidelines that specify the principles and standards for applying the Personal Information Protection Act. These will cover stages such as planning and data collection, data learning, and AI services, including ▲public information ▲unstructured data ▲biometric information ▲synthetic data ▲mobile video devices ▲and ensuring transparency.

The rights of data subjects suitable for the AI era will also be strengthened. This includes guaranteeing the right of data subjects to request explanations about AI-decided matters or to have human judgment and other responses. Privacy risk assessment criteria and models will be built according to AI types and cases, and the data processing procedures will be transparently disclosed.

Additionally, the PIPC will initiate the enactment of a tentative ‘Personal Video Information Act’ containing reasonable utilization standards for video information in line with the development of new technologies and industries. A ‘professional CPO system’ will be introduced to allow Chief Privacy Officers (CPOs) to perform their duties independently, and full operation of undergraduate majors in personal information as well as the establishment of master’s and doctoral programs will proceed.

A protection system to respond to newly emerging types of personal information infringement will also be prepared. Proactive inspections will be conducted in three citizen-close fields?education and learning services, food and beverage ordering services, and information broadcasting and communication services?as well as in three new industry fields including smart cars, AI, and super applications (apps).

Along with institutional improvements to strengthen the protection of personal information of children and adolescents, the age range for the digital right to be forgotten support project will be expanded from the current under 24 to under 29. Education for digitally vulnerable groups will be enhanced, and support for small business owners and startups will also begin.

Ko Hak-su, Chairperson of the PIPC, explained, “This year, we will create conditions suitable for personal information use in the AI environment while simultaneously establishing appropriate safeguards commensurate with risks to open an AI era that the public can trust. We will firmly protect citizens’ everyday personal information and actively alleviate public anxiety caused by the acceleration of digital transformation.”