The Personal Information Protection Commission (PIPC) released Public AX Privacy Protection Guidelines at the 11th meeting of ministers related to science and technology on Wednesday.

The guidelines were prepared to help public institutions check and respond in advance to personal data processing issues as they 추진 AX.

The PIPC said it systematically included legal standards and safeguards in the guide, based on real cases such as AI-related pre-inspections and results of prior adequacy reviews, to support a more active push for public AX. The guide divides the public AX process into three stages - prior design, development and buildout, and system deployment and management - and presents 10 key checkpoints.

At the prior design stage, it calls for clarifying the purpose to be achieved through AX and the subjects of processing to lay the groundwork for observing protection principles such as purpose limitation and minimised collection. At the development and buildout stage, it calls for applying safeguards at each point where personal data is processed, including use of training data, prompt input, links to retrieval-augmented generation, and output of results. At the system deployment and management stage, it calls for continuously checking for possible personal data leakage through testing before and after deployment and establishing monitoring and incident response systems.

Through the guide, the PIPC classifies public AX into three types - basic task assistance, information linkage, analysis and recommendation, and screening and judgment - and says it allows needed items to be reviewed flexibly depending on specific context rather than uniformly requiring the same measures for all AI systems.

For the information linkage, analysis and recommendation type, which connects multiple databases and systems to analyse or recommend customised information, it calls for closely examining the risks of use beyond the stated purpose and excessive inference of personal information. For the screening and judgment type, which is used directly in public decision-making such as selecting administrative beneficiaries and detecting risks, it calls for more careful review of the necessity and effectiveness of AX and personal data processing and of the legal basis.

The PIPC also operates a Public AX Privacy Help Desk on a standing basis to provide close support to resolve difficulties faced by public institutions.

PIPC Chair Song Kyung-hee (송경희) said public AX is a key means of government innovation that provides faster and more convenient services to the public and helps civil servants work more efficiently. She said the PIPC will provide specific standards and practical solutions so public institutions do not hesitate on innovation due to uncertainty about privacy, and will actively support public AX so it can spread in a safe and trustworthy manner.