AI Security Wiki GitHub

Home / South Korea AI Compliance / South Korea Regulatory Crosswalk

South Korea Regulatory Crosswalk

Verification required. Claims on this page about South Korean law were compiled on 7 October 2026 from secondary web sources and from memory of the law. No primary legal text was read, and each claim is tagged [Reported], [Recalled], [Conflict] or [Unverified] as explained on the section home page. Check the primary text before relying on any of them. This is not legal advice.

One row per instrument in the South Korea AI Regulatory Hub, with the wiki controls that relate to it and its verification status. The last column is empty until a row has been confirmed against the primary text; record the primary URL and the date you retrieved it there.

The same data is available as a CSV file for GRC tooling: crosswalk.csv.

Legal force sorts each row under one of seven labels, so that law is not mistaken for guidance or for a voluntary framework. The label is this wiki's reading of the sources and carries the same verification caveat as the rest of the row.

Label Meaning
Binding law Enacted law or regulation that applies generally in the jurisdiction, including provisions that start on a later date.
Binding in scope Binding only on a sector, a free zone, a state or province, or public bodies.
Guidance Published by a government or regulator, and not binding in itself.
Voluntary A standard, code or framework that an organization chooses to adopt.
Proposed A bill, draft or consultation, or a proposal that lapsed. It is not law.
Context A policy, authority, programme or summary row that sets no rule.
Unclear The sources used do not settle whether it binds.
ID Instrument Legal force Type / status Wiki controls Verification tag To verify Primary URL and retrieval date
KR1 AI Basic Act Binding law Binding; effective 22 Jan 2026 All Reported Article numbers; enforcement decree
KR2 Generative AI duties Binding law Binding AI-CTRL-039 Reported Format rules
KR3 High-impact AI duties Binding law Binding AI-CTRL-037; AI-CTRL-023; AI-CTRL-041 Conflict One source says only Level-4 autonomous vehicles currently trigger it
KR4 High-performance AI (training at 10^26 FLOP or more) Binding law Binding AI-CTRL-037; AI-CTRL-005 Reported Notification routes
KR5 Domestic representative Binding law Binding AI-CTRL-012 Reported Thresholds and form
KR6 Fines and grace period Binding law Fines up to about KRW 30 million (about USD 21,000) AI-CTRL-012 Reported Enforcement decree
KR7 Personal Information Protection Act and PIPC guidance Binding law Binding AI-CTRL-013; AI-CTRL-007; AI-CTRL-035 Recalled AI guidance
KR8 AI Basic Act Support Center Context Government support None Reported Contact