South Korea’s Personal Information Protection Commission (PIPC) is asserting global leadership in data privacy by enforcing AI model deletion and stricter cross-border data transfer rules. In a landmark case, the PIPC ordered Alipay to erase an AI algorithm trained on unlawfully transferred data from Kakao Pay, setting a precedent for targeting the model itself—not just the data. The regulator also fined AliExpress for undisclosed overseas data transfers and imposed sweeping compliance mandates on DeepSeek, a Chinese AI app. These actions signal a bold regulatory stance that prioritizes user consent, transparency, and accountability in AI and international data flows.
