Personal Information Commission Meets Data and AI Industry, Pledges to Actively Resolve Regulatory Uncertainties... Explains MyData and More

The Personal Information Protection Commission (PIPC) conveyed to the industry its plan to actively resolve regulatory uncertainties for companies this year. The industry expressed the need to eliminate uncertainties through detailed guidelines.

On the 20th, the PIPC held a New Year's meeting with the industry to share personal information policies aimed at supporting the data and artificial intelligence (AI) industries. The meeting was attended by PIPC Chairman Ko Hak-soo, platform companies such as Naver and Kakao, the three major telecommunications companies SKT, KT, and LG Uplus, as well as Coupang, SSG.com, and AI startup companies.

Chairman Ko Hak-soo of the PIPC stated, "We plan to actively support the revitalization of the data economy so that data and AI companies can grow more solidly and the public can enjoy innovative digital services," adding, "We will continuously communicate with the industry throughout the entire process from designing to implementing personal information policies to promptly resolve difficulties arising in the field."

He continued, "We are considering ways to reduce uncertainties in various innovative corporate activities," and said, "I hope we can share thoughts on proactive measures that fit the new technological, social, and market environments this year."

The PIPC also conveyed the government's determination to continuously promote digital innovation by proactively responding to new privacy issues in addition to resolving regulatory uncertainties.

Furthermore, the commission explained the preparation of the AI Privacy Six Major Guidelines, which specify the principles and standards for applying the Personal Information Protection Act to support new technologies and industries such as AI. The guidelines will cover stages such as planning and data collection, data training, and AI services, including ▲publicly available information ▲unstructured data ▲biometric information ▲synthetic data ▲mobile video devices ▲and transparency assurance.

They also introduced key personal information policies such as the operation of Personal Information Safe Zones, which support researchers and startup companies to flexibly process personal information in a secure environment.

Explanations were also provided on the pre-appropriateness review system, which has garnered significant interest from companies, and the plan to introduce MyData across all sectors. The pre-appropriateness review system is a mechanism where personal information processors and the PIPC cooperate to establish application methods of the Personal Information Protection Act so that personal information protection is properly considered during the planning and development of new technologies and services such as AI. MyData is a service that allows individuals to request companies or institutions holding their personal information to transfer that information to another place they desire.

On the day, companies expressed the opinion that detailed guidelines are necessary to resolve regulatory uncertainties. They also suggested reflecting business opinions during the MyData introduction process and expanding support for legal compliance consulting. The PIPC plans to incorporate these into policy tasks through internal reviews and consultations with related ministries, centered on the reform task force.