South KoreaPIPC Guideline on Processing Publicly Available Data for AI Development and Services
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 18 July 2024.
A comprehensive regime rule binding public and private bodies.
As of 23 August 2026.
What it requires
- An app training AI models on personal data scraped from publicly accessible Korean web sources must rely on and document PIPA Art. 15(1)(6)'s legitimate interest basis, since publicly available data is not exempt from PIPA.
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
PIPC guidance interprets PIPA Art. 15(1)(6)'s legitimate interest ground as the lawful basis authorizing an AI developer to collect and use publicly available personal data from the open web for AI training and service development, provided the controller's interest clearly overrides data subjects' rights. It treats such data as remaining within PIPA's scope, not exempt, given the privacy risk from addresses, unique identifiers, and financial data mixed into public web content.
The guideline's own text addresses AI developers and service providers generally, with no stated limit to private-sector controllers.
When LexLint raises it
crawls_webtrains_models
Read the law
PIPC official English-language notice
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.