Sejong Law Firm, led by attorney Oh Jong-han, partnered with the Korea Online Shopping Association to present comprehensive strategies addressing cyber security threats stemming from the proliferation of artificial intelligence (AI) technology and upcoming stricter personal data protection regulations.
On October 15, the two organizations held a joint seminar titled 'Personal Data Protection and Incident Response Strategies for Online Shopping Companies in the AI Era' at the Sejong D Tower seminar room in Jongno-gu, Seoul.
The event aimed to assess the security risks faced by online shopping companies in an environment where the use of AI and data is rapidly increasing and to explore practical solutions.
The seminar opened with a keynote address by Lee Tae-hee, a senior advisor at Sejong. It was divided into three sections covering incident response, legal trends, and AI security threats.
The first presentation was delivered by Choi Kwang-hee, who emphasized the three essential elements needed at the scene of a hacking incident: evidence preservation, compliance with legal reporting and notification deadlines, and the need to review response systems during normal operations.
Choi stated, "With the rapid advancement of AI, the speed of attacks has significantly increased, making it difficult to prevent all incidents perfectly. To minimize damage to critical information when incidents occur, it is crucial to have a swift reporting and evidence preservation system in place, along with conducting drills to ensure effectiveness."
Following this, attorney Ahn Jung-ho highlighted changes in corporate obligations resulting from recent amendments to the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection.
Ahn pointed out that the responsibilities for preventive measures and post-incident penalties have been significantly strengthened, stating, "Personal data protection is not just the responsibility of a specific department; it is a company-wide task. Management must review obligations under the revised laws and promptly improve internal management systems."
Professor Choi Dae-sun from Soongsil University analyzed new threat factors arising from the proliferation of AI agents. He noted that the automation of attacks through AI has drastically reduced defense costs and raised concerns about the need for authority management of internal AI agents, as well as external threats.
He explained, "AI agents pose a risk of exposing personal data through unexpected actions. It is urgent to establish a monitoring system that goes beyond simple authority restrictions to continuously record and review activity logs."
Lee Tae-hee concluded, "The online shopping industry involves numerous stakeholders, so the impact of incidents can be substantial. I hope this seminar serves as an opportunity for companies to maintain customer trust and reassess their security systems effectively."
* This article has been translated by AI.
Copyright ⓒ Aju Press All rights reserved.