[RightsCon 2025] Data Protection in the Era of AI: the Private and Public Service Perspectives

On Feb 27, 2025, Kimmy gave a speech in the session, “Data protection in the era of AI: the private and public service perspectives” at the RightsCon. Here is the information about the session and Kimmy’s speech summary.

Format: Panel discussion
Time and date: Thursday, 27 February 2025, from 11:30 am – 12:30 pm UTC +8
Venue: Room 101 A, Taipei International Convention Centre
Participants:
Moderator: Shruti Narayan, Asia Pacific Policy Counsel, Access Now
Speaker: Kohei Kurihara, CEO and Co-Founder, Privacy by Design Lab Japan
Speaker: Ken-Ying Tseng, Partner, Lee and Li
Speaker: Kyoungmi Oh (Kimmy), Open Net Korea

Session description:
In today’s rapidly evolving artificial intelligence landscape, robust data protection has become more crucial than ever. This session explores the challenges of safeguarding personal data in an AI-driven world and creates a platform for meaningful dialogue and best practice exchange across sectors. Participants will engage in discussions and share practical insights for enhancing data protection strategies while responsibly leveraging AI technologies. The panel aims to create a space for learning how to navigate complex data protection laws, implement effective governance, and foster a privacy-aware culture in this technological age.

[Summary of the presentation]
Kimmy delivered the current concern that South Korea has the AI Basic Act, which lacks strong safeguards for personal information. South Korea faces threats to both democracy and digital rights, with AI policies reflecting a broader governmental trend of prioritizing control and economic growth over transparency, ethics, and privacy.

1. AI Policy Concerns
   Despite enacting an AI Basic Law (effective Dec 2025), civic groups are concerned it prioritizes industry growth over rights and privacy.
   The law lacks strong safeguards for personal information and does not integrate with the Personal Information Protection Act.
2. Controversial AI Cases
   2.1. AI Digital Textbooks
   Not just digitized books but an educational platform tracking students’ learning behavior.
   Data collected includes sensitive information (academic emotions, preferences, learning attitudes).
   Potential risks include privacy breaches and misuse, especially considering past Ministry of Education data leaks.
   Public backlash led to legal revisions, but the government vetoed changes and offered a compromise: optional AI use in schools for a year.
   2.2. AI in Recruitment
   Growing use of AI in public and private hiring without transparency.
   Civic groups found some public institutions using AI to fully automate hiring, delegating even interview questions to private companies.
   Lack of oversight on how personal data is collected, stored, and used in hiring processes.
3. Government’s Role
   Delegates AI development to private companies but fails to regulate them effectively.
   AI policy prioritizes economic competitiveness over ethical concerns and personal data protection.
   Civic groups demand accountability, but the government remains unresponsive.

Korean version text