Security · October 18, 2026
Law Firm Highlights Need for Enhanced Security in AI Agents
The rising use of AI agents has made security management within corporate systems a new challenge. There is a potential risk that AI agents may act unexpectedly or leak personal information externally, necessitating not only access restrictions but also a system for continuous monitoring of activity logs.
On October 15, a seminar titled 'Privacy Protection and Incident Response Strategies for Online Shopping Companies in the AI Era' was co-hosted by a law firm and the Korea Online Shopping Association at the Sejong D Tower in Seoul. The event underscored the importance of corporate security management in response to the increasing cyberattacks utilizing AI and the tightening regulations on personal data protection.
Professor Choi Dae-sun emphasized that advancements in AI technology have reduced the time and cost needed for cyberattacks. He noted the importance of managing information access and permissions for AI agents used internally within companies. Professor Choi stated, “AI agents can act unexpectedly or expose personal information externally, making it difficult to control perfectly, even with access limitations or prior human approvals. Therefore, a system for continuously recording and monitoring the actual activities of AI agents must be established.”
Counselor Choi Kwang-hee highlighted the importance of preserving evidence immediately after an incident and following the legal timeline for reporting and notifying parties. He explained that training based on hypothetical incidents can minimize damage spread.
Attorney Ahn Jeong-ho explained the heightened obligations for companies following amendments to the Personal Information Protection Act and the Information and Communications Network Act. He noted that data protection and information security must now be managed not only by operational departments but also at the executive level.
Counselor Lee Tae-hee pointed out that the online shopping industry connects various stakeholders, and any leakage or incident could have widespread repercussions. He expressed hope that the seminar would serve as a reminder for online shopping companies about the importance of personal data protection and cybersecurity, prompting them to evaluate their response systems.