"The incident was caused by a human error in developing the email distribution code with an AI tool," said the Personal Data Protection Commission.