The South Korean data protection authority, the Personal Information Protection Commission (PIPC), co-organized with the Korean Association of Data Protection Officers a policy forum on establishing a preventive protection system against AI-related threats.

This event, which brought together 450 experts and data protection officers on November 9, aimed to discuss the effects of recent legislative reforms and response strategies from the public and private sectors. The PIPC emphasized its willingness to establish a risk-based regulatory framework to build a safe artificial intelligence ecosystem, stressing responsible management led by organizational leaders and their data protection officers. The authority also presented its main work areas, including strengthening preventive controls, notably in the public sector, and implementing effective sanctions.

The discussions focused on regulatory developments, notably the establishment of a strengthened sanction system providing for punitive fines of up to 10% of total turnover for serious and repeated violations, as well as a mandatory reduction of fines in case of proven preventive investments. Experts shared use cases on the implementation of autonomous security systems and stressed the need to move from a checklist approach to continuous monitoring from the attacker’s perspective. The debates also addressed the establishment of a threat information-sharing system and the strengthening of internal skills. The PIPC indicated that it would rely on these exchanges to define a flexible and risk-proportionate management system.