“Is it okay for everyone to have their Ghibli profile leaked?”... ChatGPT and privacy infringement
Kim Tae-hwan, Daeryun Law Firm, a lawyer specializing in intellectual property rights, Q&A these days chatGPTIt's trendy to create Ghibli-style profiles.. The cute and warm illustrations make you smile the moment you see them, but the original photo is captured by artificial intelligence.(AI)learning this, It can be scary to think that it can be used for something else.. generative AI ChatGPTIs 2022year 11Since the launch of the month, issues related to personal information management have been consistently raised.. When using the service, personal information AIThis is because it cannot be free from privacy infringement issues in that it is learned and stored..Problems with personal information protection AI Occurs during the learning process. AIis the text, Patterns while processing unstructured data such as images, structure, Learn arrays, etc.. At this time AIis resident registration number, address, You may not be aware that your health information is sensitive personal information.. Therefore, information may be exposed in the process of memorizing and reprinting learned information.. Due to these factors, there is a possibility that personal information may be leaked or the rights of the information subject may be violated..We heard from a lawyer specializing in intellectual property rights about legal issues and countermeasures related to this.. This is a Q&A exchange with Kim Tae-hwan, a lawyer specializing in intellectual property rights at Daeryun Law Firm..▶ AI If the model learned and used individual information, could it be a violation of the Personal Information Protection Act??AI When the model learns and uses individual personal information, This may be a problem as it violates the Personal Information Protection Act.. According to the Personal Information Protection Act, a legitimate legal basis is essential for collecting, using, and providing personal information.. Personal Information Protection Act15The article stipulates that when collecting and using personal information, the consent of the information subject or legal requirements must be met..Same law15Joe and Je17Joe restricts the use or provision of personal information for purposes other than those intended.. The problematic part in this case is 'Data Subject Consent'It can be seen that. In order to process personal information, the consent of the data subject must be obtained first.. but, AI If the personal information included in the data learned by the model is already public information, there may be cases where it can be processed without consent, so review is necessary..Another issue depends on how to recognize the legitimate interests of the personal information processor.. The purposes for processing personal information must be based on reasonable and legitimate business needs;, The purpose must be evaluated as having priority over the rights or interests of the information subject..In other words, no matter how great the personal information processor's interests are, it may cause excessive infringement on the information subject or, If personal information is used in a way that the information subject does not expect 'legitimate interests'This means it is not recognized. In these situations, personal information AI Let them learn 2Secondary use increases the likelihood of violating the Personal Information Protection Act..Personal information provision notice text, Even if it is too small, it is illegal ▶ With the development of science and technology, problems with personal information processing are increasing.. If you have suffered personal information leakage, what are your countermeasures??Legal measures that can be taken in response to damage from personal information leakage mainly include fines or surcharges from administrative agencies., Civil damages claim, The same method as criminal charges can be used.. actually AIThis is a difficult issue as the representative lawsuit related to this has not yet been proceeded in Korea.. As for issues related to personal information, the Homeplus case is a representative criminal case.(supreme court 2017. 4. 7. sentence 2016do13263 judgment)An example can be given.. Personal information protection laws are enforced in the process of collecting and providing personal information for the sweepstakes.15Failure to properly comply with the notices pursuant to Article, Personal Information Protection Act17This is a case where the regulations regarding the provisions were not properly followed..In particular, notices regarding provision of personal information are written in small letters., It was not a situation where consumers could sufficiently read and agree.. This violates the legal requirement that clear notice and consent must be provided in the process of obtaining consent from the information subject.. Ultimately, the Personal Information Protection Act72Preparation2Ho and Je59Preparation1In accordance with no., Homeplus and the person in charge were held criminally responsible.. The incident 'lack of consent'class 'unclear notice'This is a case of violation of the Personal Information Protection Act and can be said to be an important precedent that sets legal standards for similar cases in the future..▶ Personal information processor AI In the case of service providers, what strategies should be developed to comply with related laws such as the Personal Information Protection Act??AI There is a possibility that the model's process of learning and using personal information may violate personal information protection laws.. thus AI Developers and service providers must clarify the legitimate legal basis and, Safety and the rights of information subjects must be thoroughly guaranteed.. Even when processing personal information disclosed in accordance with the Personal Information Protection Act, the legal basis and safety standards must be complied with., It is important to clearly obtain consent from the information subject..A specific consent procedure must be established and personal information must be thoroughly managed to ensure that it is not used or provided for purposes other than the purpose for which it was processed.. Safety measures must also be strengthened to prevent personal information leaks.. Safety is ensured under the Personal Information Protection Act.29Establishment of an internal management plan as specified in Article, It must include technical, managerial and physical measures related to access record storage, etc.. [View full article]
“Is it okay for everyone to have their Ghibli profile leaked?”... Chat GPT and personal information infringement (link)