[IT Column] AI Services and Personal Information Protection

The advancement of AI technology has led to the emergence of various AI-based services. These services generally process vast amounts of data, and there is a high probability that personal information is included in that process. Therefore, companies planning or operating AI services must strictly comply with relevant laws and regulations such as the Personal Information Protection Act.

In particular, when collecting data for AI model training, it is necessary to carefully review whether personal information is included and to take care not to infringe on the self-determination right of personal information. The Personal Information Protection Act stipulates that when collecting personal information from entities other than the information subject, there is an obligation to inform the information subject of the source of collection, processing purpose, legal basis, etc., if requested (Article 19). In addition, information subjects have the right to request access (Article 15), the right to correct or delete (Article 16), the right to request suspension of processing (Article 17), and companies must have systems to guarantee these rights.

If the data used for AI training includes personal information, the series of actions such as collection, storage, analysis, and re-processing of that data constitutes ‘processing’ under the Personal Information Protection Act. Therefore, it is necessary to review and comply with the legal responsibilities and compliance requirements for personal information processing throughout the entire AI training process.

Companies developing and operating AI services should recognize personal information protection not as a mere legal obligation, but as an essential element for securing user trust and ensuring the sustainability of services.

Law firm Veat provides specialized legal advice in the areas of AI technology, data protection, and personal information, centered on IT specialist lawyers certified by the Korea Bar Association and lawyers with backgrounds in engineering and science. We provide strategic advice to numerous artificial intelligence AI companies and data information-based companies on complex legal issues such as personal information collection, use, and overseas transfer, and we have expertise in preventing personal information infringement risks in the AI training data processing process and establishing personal information protection systems.

If you need legal advice regarding artificial intelligence, AI, or personal information protection, please feel free to contact Law firm Veat.

You can find more detailed information about this column on the Law firm Veat blog below.

-[IT Litigation] In the Age of Artificial Intelligence, AI Services and Individual Information.. : Naver Blog

Thank you.
Law firm Veat