Personal data
Articles on Personal data from LegalAgent AI Legal Lab — practical review points, clause-level checks, and AI-assisted legal workflows.
Articles tagged Personal data
Articles on Personal data from LegalAgent AI Legal Lab — practical review points, clause-level checks, and AI-assisted legal workflows.
Personal Data Breaches from Unauthorized Access: Initial Response and Data Retention Lessons from the September 2026 Incidents
Drawing on the series of personal data breaches in September 2026, including about 6.6 million Times Car records and unauthorized access at major delivery companies, this article explains the initial response: reporting to the Commission and notifying individuals, leaked images of identity documents, retaining data on former members, and breaches at contractors.
Read article
The Amended Act on the Protection of Personal Information: Where Things Stand After Promulgation and What Companies Should Prepare
The amended Act on the Protection of Personal Information (Act No. 56), promulgated on July 17, 2026, does not yet have an effective date. In light of the administrative surcharge system and the rules on biometric information, here is where things stand after promulgation and the key points of internal reviews that can be started in advance.
Read article
Initial Response to a Personal Data Breach: Reporting Deadlines and a Timeline of What to Do
This article explains what must be reported when a personal data leak is suspected, the deadlines for preliminary and final reports, notification to individuals, preservation of evidence and dealing with contractors. It covers the practice of recording who learned of the situation and when, and of meeting reporting deadlines while preventing harm in parallel.
Read article
Legal Issues for AI Companion and AI Partner Services: Minors, Personal Information and Safety Design
In AI companion services, where users disclose their loneliness and medical history, managing conversation logs and specifying the purposes of use are essential. Everything from payment paths for minors to crisis response design needs to be reviewed from the perspectives of both the screens and operations.
Read article
Drone Businesses: Aircraft Registration, Permission for Specified Flights and Personal Information in Aerial Photography
In the drone business, check aircraft registration and flight permission together with actual flight operations management. This article explains the exceptions to Remote ID, the requirements for Level 4 flights and the rights involved in filming that cannot be dealt with through a contract with the customer alone.
Read article
Job Media and Scouting Services: The Boundary with Employment Placement and Personal Information
Depending on its features, a job site can go beyond providing information and constitute employment placement. Check whether the operator screens candidates or job offers and whether it intervenes in the content of communications, and also consider notification requirements and the handling of personal information.
Read article
What Is a Personal Information Handling Clause? Points to Check in Outsourcing and SaaS Agreements
Not every use of SaaS or AI constitutes entrustment under the law. You need to check the actual data flow and how the provider handles the data, and reflect in the clause the relationship with the DPA, provision to foreign countries and the allocation of roles in the event of a leak.
Read articleAI Services and Personal Information Protection: What Companies Should Check First
Whether sending data to an external AI constitutes entrustment or third-party provision is determined based on the purpose of use and how the data is actually handled. The conditions for cross-border transfer and the impact of output on individuals should also be checked.
Read article