Kakao Unveils Security Framework Based on Privacy by Design: Separation of CPO and CISO, 24/7 Real-Time Monitoring

To secure user trust, Kakao has established a system that adopts Privacy by Design as a fundamental principle of privacy protection, predicting and preventing infringement factors from the service planning and design stages. On the organizational front, the roles of the Chief Privacy Officer (CPO) and Chief Information Security Officer (CISO) have been separated to enhance expertise. In terms of security response, a dedicated security control center has been set up to operate 24/7 real-time monitoring and a dual control system. Additionally, rapid threat response is achieved through AI-based abnormal behavior detection, correlation analysis via SIEM, and automation of security tasks. The security framework has been verified through international and domestic certifications such as ISO 27701 and ISMS-P. Personal information is managed under strict standards, including minimal collection and encryption, throughout the entire lifecycle from service introduction to termination.