Personal Photos of 189 Evaluation Committee Members Leaked to ChatGPT During AI System Development in South Korea

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

An internal employee at South Korea's Public Procurement Service uploaded facial photos of 189 evaluation committee members to ChatGPT during AI system development and testing, resulting in a privacy breach. No other personal data was leaked. Authorities notified affected individuals, reported the incident, and implemented measures to prevent recurrence.[AI generated]

Why's our monitor labelling this an incident or hazard?

The event involves the use and development of an AI system, specifically the uploading of personal data to a generative AI service (ChatGPT). The unauthorized exposure of personal facial photos constitutes a violation of privacy rights, which falls under violations of human rights or breach of obligations under applicable law protecting fundamental rights. Since the harm (privacy breach) has already occurred due to the AI system's use, this qualifies as an AI Incident rather than a hazard or complementary information.[AI generated]
AI principles
Privacy & data governanceRespect of human rights
Industries
Government, security, and defence
Affected stakeholders
Workers
Harm types
Human or fundamental rights
Business function:
Research and development
AI system task:
Interaction support/chatbotsContent generation

Articles about this incident or hazard