The revised Personal Information Protection Act, signed into law on September 8, introduces AI-specific rules to enhance data use while addressing public interest and competitive concerns. Slated for March 9, 2027, implementation, the act faces scrutiny over vague regulations and potential barriers for smaller enterprises, amid calls for clarity in risk evaluation and data usage protocols.