Later Reuse of Prompts and Logs and the Legal Characterization of External Providers in Generative AI Services: Focusing on the Japanese Act on the Protection of Personal Information

This KCI-listed journal article examines two legal issues that become especially important after user input is processed in generative AI services: the later reuse of prompts and logs, and the legal characterization of external providers such as API providers and SaaS-based model service providers. Focusing on Japan's Act on the Protection of Personal Information, the article uses Korean law as a comparative reference to clarify how purpose limitation, additional use, outsourcing, third-party provision, and responsibility allocation should be understood in generative AI service structures.
Published in 국제법무, 2026, volume 18, issue 1, pages 199-226. DOI: 10.36727/jjilr.18.1.202605.007. Authors: Shuo HAN and 이상모.
生成式人工智能服务中提示词与日志的后续再利用及外部提供者的法律性质:以日本个人信息保护法为中心
本文聚焦生成式人工智能服务中输入后的处理阶段,讨论提示词与日志的后续再利用,以及 API 提供者、SaaS 型模型服务提供者等外部提供者的法律性质。文章以日本个人信息保护法为中心,并以韩国法中关于收集与利用、追加利用、委托和责任分配的规范结构作为比较参照,分析目的限制、第三方提供与委托边界在生成式人工智能服务中的适用问题。
发表于《国际法务》2026年第18卷第1期,第199–226页。DOI:10.36727/jjilr.18.1.202605.007。作者:韩硕、Lee Sang-mo。