Song Kyung-hee, chair of the Personal Information Protection Commission, stated that security investments in South Korea have been insufficient compared to the country's advancements in information technology (IT). She emphasized the need to enhance response capabilities in collaboration with relevant agencies, particularly as hacking using artificial intelligence (AI) is rapidly increasing.
During a National Assembly audit on October 13, in response to a question from Rep. Jo Jeong-hoon of the People Power Party regarding a data breach incident, Song remarked, "Compared to the investments made in IT development, security investments have been significantly lacking. It is true that our country's personal information security and management systems have fallen behind considerably."
The audit also addressed the delayed notification issue related to the Government24 data breach that occurred in August. Rep. Jo pointed out that the law requires notification of data breaches within 72 hours, yet Government24 took over a month to inform the public, questioning the commission's response and accountability.
Song identified the lack of domestic security investment as a key factor contributing to the vulnerability of personal information protection systems. She explained that while IT infrastructure has advanced, corresponding security investments have not kept pace, and the personal information protection and management systems have not been adequately updated.
Regarding AI-driven hacking, she noted that while the speed and scope of attacks are expanding, many security incidents occur due to inadequate basic security measures. In response to a request from Democratic Party lawmaker Min Byeong-deok for proactive measures such as automated attack detection systems and simulation training, Song highlighted the importance of fundamental security practices, including access control management, encryption, and anomaly traffic detection.
* This article has been translated by AI.
Copyright ⓒ Aju Press All rights reserved.