KIC Uses Chinese AI Models, Including U.S.-Sanctioned Entity, for Sensitive Document Processing

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

South Korea's sovereign wealth fund KIC deployed Chinese AI models, including one from a U.S.-sanctioned institution, to process sensitive internal and governmental documents. The lack of security vetting and use of sanctioned technology raised significant national security and confidentiality risks, sparking criticism over governance and potential harm to state interests.[AI generated]

Why's our monitor labelling this an incident or hazard?

The article explicitly mentions AI systems (language and embedding models) used internally by KIC, a sovereign wealth fund managing national assets. The use of AI models from Chinese developers, including one under U.S. export controls, raises plausible security risks that could lead to harm (e.g., data breaches, espionage, or misuse of sensitive information). However, the article does not report any actual incident of harm or malfunction caused by these AI systems. The concerns are about potential future risks due to insufficient security review and governance. Hence, this qualifies as an AI Hazard rather than an AI Incident. It is not Complementary Information because the main focus is on the risk and governance gaps, not on responses or updates to a prior incident. It is not Beneficial Use or Unrelated.[AI generated]
AI principles
Robustness & digital securityPrivacy & data governance

Industries
Government, security, and defence

Affected stakeholders
Government

Harm types
Public interest

Business function:
ICT management and information security

AI system task:
Content generation


Articles about this incident or hazard