Republic of Korea: Adopted PIPC AI Privacy Risk Assessment and Management Model for Personal Information Protection

On 19 December 2024, the Korean Personal Information Protection Committee (PIPC) adopted the Artificial Intelligence (AI) Privacy Risk Assessment and Management Model. The document supports autonomous privacy risk management among AI companies, enabling them to independently establish a safer and more responsible risk management system tailored to the specific contexts of their AI models and services. The model provides a framework for privacy risk management, including a greater focus on lifecycle-specific AI privacy risks, such as the differences between generative and discriminative AI.