The "World-First AI Training-Data Law" Is Not In Force
Headlines calling Korea's 11 September PIPA amendment the "world-first AI training-data law" are wrong: two separate amendments are being conflated, and the one now in force carries no AI-training-data provision.
Why It Matters
If you saw reports this month that Korea's "world-first AI training-data law" became enforceable on 11 September, do not build a compliance plan around them — they attach an AI provision to the wrong statute. The amendment that actually took effect on 11 September 2026 (promulgated 10 March 2026) raises punitive surcharges to a share of total revenue, makes data-breach liability an explicit CEO and board matter, and widens breach reporting to a "possibility of leak" trigger. It carries no AI-training-data provision at all.
The AI route — a case-by-case PIPC approval path for processing original, non-pseudonymised personal data to train AI — sits in a distinct bill that passed the National Assembly and was announced by Korea's PIPC on 27 August 2026. Nothing published shows it in force. Treat the Korean AI training-data route as pending, not available, and keep the two workstreams separate: the revenue-linked penalty and CEO-accountability regime is live now and applies to all personal-data processing, regardless of AI use.
Action Items
Submit NIST AI 300-1 comments today — the public-facing AI documentation draft closes for comment 16 September (today); input is by email. If your public model or system documentation is in scope, this is the last day.
Run the Korea PIPA workstream now — revenue-linked surcharges and CEO/board breach accountability are live as of 11 September; do not plan Korean AI training on original personal data against that date.
Read the NIH "novel agent or organism" definition — if you run AI-assisted biological design on NIH-funded work, check it against your pipeline before comments close 19 October.
Get the full analysis. Pro subscribers receive the complete deep dive, all 5 action items, source documents, and jurisdiction-specific compliance checklists.
Subscribe to Pro to read the rest.
Become a paying subscriber of Pro to get access to this post and other subscriber-only content.
UpgradeA subscription gets you:
- Deep dives of each updated regulation
- Source verification documents
- Extended jurisdiction-specific analysis
- Compliance deadline tracker
- Regulation crosswalk