Personal Information Commission announces major policy implementation plan for 2024... Promoting the enactment of the Personal Video Information Act
Preemptive status inspection in the smart car, AI, and super app sectors... Expanding support for the ‘right to be forgotten’ to erase digital records
The government has decided to establish AI guidelines to protect personal information in the artificial intelligence era.
In addition, we are also promoting the enactment of the 'Personal Video Information Act' (tentative name), which contains standards for reasonable use of video information in response to changes in the industrial environment, such as self-driving cars.
On the 16th, the Personal Information Commission announced a major policy implementation plan for 2024 containing the following contents.
According to the plan, '6 major guidelines' for each AI stage that specify the principles and standards for applying the Personal Information Protection Act in an artificial intelligence environment with complex data processing methods will be prepared by the end of this year.
The Personal Information Commission plans to prepare guidelines within the year on public information, unstructured data, biometric information, synthetic data, portable imaging devices, and ensuring transparency.
In the process of developing AI models or services by startups, the National Security Commission prepares a plan to comply with personal information laws and regulations with startups, etc., and also implements a 'prior adequacy review system' that exempts the business from administrative disposition if it complies with the plan.
In addition, we will support the development of high-tech industries such as self-driving robots by operating a regulatory sandbox that allows the use of original video information, and will also operate a 'personal information safe zone' to enable flexible processing of personal information by AI researchers and startups.
It also guarantees the information subject's right to respond to automated decisions that affect an individual's life, such as AI-based recruitment and selection of welfare recipients. The information subject can request an explanation for the decision made by AI, etc., and can refuse it and have it judged again by a human.
We will also promote the establishment of institutional and technical infrastructure so that citizens can directly select and use their personal information and provide innovative My Data services that transcend individual areas as well as areas.
First, we will support medical and telecommunication companies to discover and verify leading services, and establish detailed standards for exercising the right to request the transmission of personal information. We will also establish a ‘My Data Support Portal’ where you can easily use the My Data service.
We will also conduct preemptive status checks on three major areas closely related to the public, such as education and learning services, which are likely to cause inconvenience and risk in people's daily lives, and three new industries, such as smart cars, which require transparency in the processing of personal information.
In addition, we plan to promote public-private cooperation self-regulation 2.0 for online platforms and expand the application of self-regulation to new personal information processing environments such as clouds and peer-to-peer transaction (C2C) platforms.
The rights and interests of information subjects in the digital era are also strengthened.
We will introduce a public institution protection level evaluation system to raise the level of personal information management in the public sector and improve transparency by implementing a personal information processing policy evaluation system.
We will revise the online customized advertising guidelines and prepare measures to protect basic rights, including standards for reasonable use of biometric information such as facial recognition technology and expansion of means to guarantee the rights of biometric information subjects.
We plan to develop measures to protect basic rights and expand the target age for the digital right to be forgotten support project from under 24 to under 29.
In addition, in order to establish standards and safety measures for the reasonable use of video information in line with rapid changes in new technology and new industries, we are promoting the enactment of the tentatively named Personal Video Information Act and operating an online one-stop support platform for the entire process of using pseudonymous information.
We also plan to operate a full-scale personal information bachelor's major (5 universities, about 150 students), promote the opening of master's and doctoral majors, and hold an international conference on AI privacy and the 2025 GPA (Global Personal Information Protection Agency) general meeting.
Personal Information Committee Chairman Ko Hak-soo said, “Learning data determines the performance of artificial intelligence, and the core of data is personal information, so the role of the Personal Information Committee is more important than ever.” He added, “This year, the conditions for using personal information suitable for the AI environment are “We will create an AI era in which the public can trust by establishing appropriate safety measures commensurate with risks,” he said.