Shin & Kim Holds Seminar on "Personal Data Protection Strategies for Online Shopping Companies in the AI Era"

From Initial Response to Hacking Incidents to Stricter Personal Data Protection Regulations

Shin & Kim held a seminar titled “Personal Data Protection and Incident Response Strategies for Online Shopping Companies in the AI Era” jointly with the Korea Online Shopping Association on October 15 at Sejong D-Tower in Jongno-gu, Seoul.

(From left) Lee Taehee, advisor at Sejong; Choi Gwanghee, advisor; attorney Ahn Jeongho; and Professor Choi Daeseon of Soongsil University. Sejong.

The seminar was organized to discuss ways for online shopping companies to respond to cybersecurity threats and increasingly stringent personal data protection regulations amid the growing use of AI and data. Following opening remarks by Shin & Kim advisor Lee Taehee, presentations were given on topics including incident response, personal data protection laws and regulations, and AI security threats.

Shin & Kim advisor Choi Gwanghee spoke on “Three Things Needed at the Scene of a Hacking Incident,” outlining measures companies should take when a security incident occurs. “With advances in AI rapidly increasing the speed of cyberattacks, it is becoming practically difficult to prevent every security incident completely,” Choi said. “It is important to establish systems for prompt reporting and evidence preservation to minimize damage to critical information and services when an incident occurs, and to ensure the effectiveness of response systems through regular drills based on real-world incident scenarios.”

Attorney Ahn Jeongho (the 38th class of the Judicial Research and Training Institute) spoke on “Key Legal and Regulatory Developments in Personal Data Protection for Online Shopping Companies,” explaining how recent amendments to the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection have changed companies’ obligations and the regulatory environment. He noted in particular that companies’ responsibility for preventive measures is being emphasized, while post-incident sanctions, including surcharges, are also being strengthened. “Personal data protection and information security are no longer issues for the departments in charge alone. Companies need to review their obligations under the amended laws across the entire organization, including senior management, and update their internal management systems and incident response procedures,” Ahn said.

Soongsil University Professor Choi Daeseon spoke on “AI Development and Cybersecurity Threats,” outlining new security risks arising from the spread of AI agents and ways to address them. “AI agents may act in unexpected ways that go beyond companies’ instructions or expose personal data externally,” Choi said. “Even if access permissions are restricted or prior human approval is required, it is difficult to control them completely. Companies therefore need to establish systems to continuously log and monitor the actual activities of AI agents.”

In his opening remarks, Shin & Kim advisor Lee Taehee said, “The online shopping industry connects a wide range of stakeholders, including consumers, sellers, and platforms. As a result, the impact of a personal data leak or security incident can spread widely. I hope this seminar will give online shopping companies an opportunity to reaffirm the importance of personal data protection and cybersecurity and review their practical response systems.”

This content was produced with the assistance of AI translation services.