AI Security Wiki
GitHub

Home / South Korea AI Compliance / South Korea: Role Guide

South Korea: Role Guide

Verification required. Claims on this page about South Korean law were compiled on 7 October 2026 from secondary web sources and from memory of the law. No primary legal text was read, and each claim is tagged [Reported], [Recalled], [Conflict] or [Unverified] as explained on the section home page. Check the primary text before relying on any of them. This is not legal advice.

Use the South Korea AI Regulatory Hub for instrument detail, and the templates in this section.

AI practitioners

For engineers, data scientists and security staff.

  • Add visible or audible markers and notices to generated media (KR-T2).
  • Where a system is high-impact, document its purpose, data, impact on rights, oversight and explanation (KR-T1).
  • Keep logs and documentation ready for inspection.
  • Test Korean-language behaviour and safeguards.

Product companies

For vendors, SaaS providers and platforms.

  • Check the domestic representative thresholds (KR-T3).
  • Classify your product as generative, high-impact or high-performance.
  • Prepare Korean-language notices and labels.
  • Use the grace year to build evidence.

Auditors

For internal, external and assurance auditors.

  • State the basis: a binding Act with a grace period on fines, and criteria whose detail comes from the decree.
  • Test labelling and notices on samples.
  • Check the record of the high-impact determination.
  • Verify that a representative has been appointed where the thresholds are met.

Implementors

For programme leads, GRC teams, CISOs and DPOs.

  • Add Korea to the regional applicability register.
  • Set up a project to finish the documentation before the grace period ends.
  • Assign a local representative and legal counsel where needed.
  • Track the decree and the guidelines.

Shared evidence list

  • High-impact determination
  • Impact assessments
  • Label and notice test results
  • Representative appointment
  • Documentation and logs

Report limitation sentence for auditors

"Criteria were taken from a regulatory register dated 7 October 2026, compiled from secondary sources and not verified against primary legal text. This report is not a legal opinion."