South Korea AI Governance Profile

The AI Basic Act entered its main implementation phase on 22 January 2026 and establishes a national framework for AI development and trust. It contains binding transparency duties for specified generative and high-impact AI uses, obligations for high-impact systems, advanced-model safety provisions, institutional mechanisms and enforcement tools. Selected amendments took effect in July 2026, while subordinate legislation further defines implementation. On 28 August 2026, amendments to the AI and Data-Based Administration Act and related subordinate rules added a substantial public-sector governance layer. Enterprises should map whether systems fall within high-impact, generative or advanced-AI provisions and design documentation, human oversight, risk management and transparency into deployment processes.

South Korea’s architecture combines a binding national AI framework statute with subordinate rules and a separate public-sector AI/data administration layer. Article 31 transparency, Article 34 high-impact AI duties, advanced-AI safety provisions and public-sector impact-assessment mechanisms are distinct legal layers and should not be collapsed into an EU-style single risk taxonomy.

MOIS’s 1 October public-sector ethics framework complements the statutory layer through six values, 68 self-check items and three tailored levels of assessment. Its voluntary self-assessment is not a new statutory duty.

Enterprises should determine whether systems fall within generative-AI, high-impact-AI or advanced-AI provisions under Korean statutory definitions. Applicable controls may include notice and labelling, risk management, documentation, user protection, human oversight, safety evaluation and evidence retention. Cross-border providers should review territorial scope where Korean users or markets are affected.

Classification confirmation is a separate procedure: under Decree Article 25 a business may request confirmation from the Minister of Science and ICT with a product/service overview, training-data overview, evidence of use process/results and other relevant documents. Keep that classification request separate from Article 23 transparency, Article 27 high-impact business duties and Article 28 assessment provisions.

South Korea’s model is a dedicated framework statute with industrial-development and trust objectives, supplemented by detailed subordinate rules and public-sector administration law. It is binding and materially consequential, but its categories and duties should be interpreted from Korean statutory text rather than imported from the EU AI Act.