BSA filed comments in response to the Personal Information Protection Commission's comprehensive review of whether Korea's data protection regime, including the Personal Information Protection Act (PIPA), remains fit for purpose in the AI era. BSA's recommendations urge the PIPC to broaden the legitimate interest basis for processing under Article 15(1)6, to assign distinct responsibilities to personal information controllers and outsourcees, and to facilitate cross-border data transfers by recognizing internationally accepted transfer mechanisms.

Translation: Korean