Republic of Korea: Personal Information Protection Commission's assessment of Kakao Corp.’s artificial intelligence service Kanana

On 12 March 2025, the Personal Information Protection Commission (PIPC) issued an assessment of Kakao Corp.'s artificial intelligence service, "Kanana," following an investigation into its implementation. The assessment reviewed the service’s compliance with data protection regulations, focusing on safety measures, data processing protocols, and internal management systems. Kakao Corp. seeks to prevent personal data breaches through its proprietary AI model and collaboration with OpenAI, aiming to ensure strong privacy safeguards. The company has introduced measures such as data encryption, user consent for learning data, and oversight by a dedicated Chief Privacy Officer responsible for continuous privacy improvements. The PIPC will continue to monitor Kakao Corp.’s implementation of these measures after the service is launched. It also intends to strengthen the prior adequacy review system to address legal uncertainties associated with emerging technologies, particularly AI, and safeguard data subjects' rights.