Republic of Korea: Personal Information Protection Commission approved feasibility review for Artificial Intelligence-based voice phishing detection service proposed by LG Uplus Corporation and KT Corporation

Description

Personal Information Protection Commission approved feasibility review for Artificial Intelligence-based voice phishing detection service proposed by LG Uplus Corporation and KT Corporation

On 9 July 2025, the Personal Information Protection Commission (PIPC) approved the feasibility review for a voice phishing detection service proposed by LG Uplus Corporation and KT Corporation. The approval applies to telecommunications providers and financial institutions using subscriber communication data and fraud detection systems. The service allows telecom operators to use Artificial Intelligence (AI) models trained on known phishing call patterns to predict suspicious numbers, which financial institutions can query during fraud investigations. Institutions must report detection outcomes to improve the AI model. PIPC imposed conditions including strict purpose limitation, clear user notice, data handling contracts, and restricted use of data.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
infrastructure provider: internet and telecom services, ML and AI development
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2025-07-09
in force

On 9 July 2025, the Personal Information Protection Commission (PIPC) approved the feasibility revi…