Regulations · South Korea
AI REGULATION

South Korea

PROPOSED

South Korea is advancing comprehensive AI legislation through the AI Basic Act while already enforcing sector-specific requirements in finance and healthcare.

KEY LEGISLATION 4 laws
AI Basic Act (Framework Act on AI) PROPOSED
2024-01
Comprehensive AI framework law establishing principles, high-risk classifications, and a national AI committee for governance oversight
Personal Information Protection Act (PIPA) ENACTED
2023-03
Data protection law with automated decision-making provisions requiring explanation and right to refuse profiling
National AI Strategy ENACTED
2019-12
Government roadmap targeting AI leadership with investment commitments, talent development, and ethical AI principles
AI Ethics Standards ENACTED
2022-05
Government-published ethical principles for AI development covering human dignity, fairness, and social responsibility
ANALYSIS

Regulatory Landscape

South Korea is pursuing a dual-track approach to AI governance: advancing comprehensive framework legislation through the National Assembly while enforcing existing laws — particularly data protection and sector-specific regulations — against AI-related harms. The AI Basic Act, if enacted, would make South Korea one of Asia’s first jurisdictions with dedicated comprehensive AI legislation.

The Korean approach balances ambitious national AI goals — targeting leadership in semiconductor and AI technology — with recognition that governance frameworks are necessary for public trust and international competitiveness. South Korea’s advanced digital infrastructure and high technology adoption rates create both opportunities and unique governance challenges.

AI Basic Act

The AI Basic Act has progressed through multiple drafts in the National Assembly, with competing proposals from different political parties reflecting varying priorities between innovation promotion and risk management. The bill would establish a national AI committee, define high-risk AI systems requiring additional oversight, create impact assessment requirements, and establish foundational principles for AI governance.

Key debates around the legislation include the scope of high-risk classifications, the degree of mandatory versus voluntary compliance, and the institutional design of AI oversight. The influence of the EU AI Act’s risk-based approach is evident, though adapted to Korean institutional and economic contexts.

Data Protection and AI

South Korea’s Personal Information Protection Act, significantly amended in 2023, provides robust protections relevant to AI systems. PIPA’s provisions on automated decision-making grant individuals the right to explanation for significant automated decisions and the right to refuse profiling. The Personal Information Protection Commission has issued guidance specifically addressing AI systems, including requirements for algorithmic transparency in commercial services.

Industry Impact

South Korea’s AI ecosystem — led by Samsung, Naver (HyperCLOVA), Kakao, and LG AI Research — is among Asia’s most sophisticated. Companies are developing governance programs in anticipation of the AI Basic Act while complying with existing PIPA requirements. The semiconductor industry’s critical role in global AI supply chains (Samsung, SK Hynix) adds strategic dimensions to Korea’s AI governance choices.

What Comes Next

The AI Basic Act’s passage is expected within the current legislative session, potentially making South Korea the first major Asian economy with comprehensive AI legislation. Implementation will require secondary legislation defining high-risk categories and specific compliance requirements. South Korea’s participation in international governance forums and bilateral cooperation with the US and EU will shape how its framework aligns with global standards.