Toss Participates in Global Privacy Assembly

• Toss to showcase Facepay - its facial recognition payment service - to global data protection authorities
• FacePay to be introduced as a security case combining privacy protection and technological innovation
• Toss to host an experiential booth for global attendees, offering hands-on access to FacePay and K-culture goods as gift

Toss announced that it will showcase the security and privacy protection technologies behind Toss FacePay at the 47th Global Privacy Assembly (GPA), to be held in Seoul.

The GPA is the world’s largest international forum in the field of personal data protection, bringing together data protection authorities from around the globe. A total of 148 institutions from 95 countries, including Korea, the United States, and the European Union, participate in the assembly, leading global discussions on privacy issues. The 47th GPA, hosted in Seoul under the leadership of Korea’s Personal Information Protection Commission, will take place over five days starting September 15 under the theme “Artificial Intelligence in Our Daily Lives - Data and Privacy Issues.”

Toss will participate in the event as an exhibitor at the AI technology experience zone, offering global attendees an opportunity to experience Toss FacePay firsthand. Visitors to the booth, designed under the concept of a “FacePay Store,” will be able to try the facial recognition payment service and receive K-culture-themed goods, such as snacks and beauty products that have gained global popularity.

Toss FacePay is an innovative service that enables payments using only facial recognition. Once a face is recognized in-store, payments are completed instantly without the need for cards or mobile devices. Beyond convenience, the technology is gaining attention for fundamentally transforming offline payment methods.

It is also the only facial recognition payment service to have undergone a preliminary adequacy review by the Korean Personal Information Protection Commission. All data is securely encrypted and managed, and is used only within the necessary scope with user consent. Through this, Toss aims to deliver both convenience and security while presenting a new offline financial experience built on digital trust.

In addition, Toss will introduce its personal data protection management framework at the event. The company systematically manages the entire lifecycle of personal data including collection, storage, provision, and disposal, based on users’ consent history and data table information. It operates internally developed systems such as a “Personal Data Meta Management System” and a “Personal Data Risk Management System,” continuing to build a reliable privacy protection framework that users can trust.

“Toss’s participation in the GPA is an opportunity to showcase our security capabilities that integrate privacy protection with technological innovation on the global stage,” said Changbok Lee, Chief Privacy Officer (CPO) of Toss. “We will continue to lead privacy protection technologies aligned with global standards and create safer and more convenient financial services.”