[DigitalToday reporter Chi-kyu Hwang] Song Kyung-hee, chair of the Personal Information Protection Commission, said in a New Year address on Thursday that she would designate this year as the first year of a major shift in the personal data protection system and pursue five key policies.

First, the commission will move to create a virtuous cycle in which “strong sanctions” and “active investment” coexist.

Song said, “We will apply strict punitive penalties of up to 10 percent of sales for serious or repeated leak incidents, while providing tangible incentives to companies that work hard on security.”

As the second task, she cited a shift to a prevention-centred protection system. Song said, “As a new organisation in charge of prevention has been established from the New Year, we will push ahead in earnest with pre-emptive inspections, focusing on areas such as distribution and platforms that process personal data on a large scale or handle sensitive personal data.”

As the third task, she presented an “AI innovation society” based on trust.

She said, “We will introduce an exception that allows original data to be used for AI training when certain requirements are met, and we will also expand the grounds for processing personal data.” She added, “We will newly operate a ‘one-stop pseudonymisation service’ so that high-quality data accumulated in the public sector can be put to good use, and if personal data issues arise during the public sector AX innovation process, the commission will actively serve as a dedicated consultation channel.”

As the fourth task, she stressed building a “privacy safety net” in daily life.

Song said, “We will introduce and expand a Privacy by Design certification system centred on smart devices widely used by the public, such as robot vacuum cleaners, and we will also devise protection measures for areas that require special consideration, such as children and adolescents and deceased persons.”

As the fifth task, she highlighted personal data protection through cooperation with the international community. She said, “We will expand safe means of overseas transfers and lead efforts to build a global consultative body to eradicate the illegal distribution of personal data.”