East Asia

South Korea

대한민국

Last updated: 2026-10-13

Status under re-verification · Last verified: 2026-10-05

CyberInsight Asia assessment Seed score

Risk score: ~72
Country risk level: High
U.S. coercion and market-exclusion risk: Medium-high
Maturity: 80CMM level: Level 5 Optimising · Leading
Composite risk index: 0.9Broadly balanced
Quadrant: Under pressure
Last verified: 2026-10-09

Scores and risk labels are our own assessment, based on public sources as of the date shown. They are opinions, not findings or statements of fact about any government, organisation or group.

Scores start from a seeded CyberInsight assessment and move as new evidence is recorded. A dimension with no new evidence keeps its last valid contribution.

These dimensions have no evidence yet and are held unchanged: Critical-infrastructure exposure, Regulatory enforcement capability (inverse), Enterprise practice, Geopolitics and great-power risk, Historical incident severity, International cooperation, Laws and regulations, Regulatory capability, Strategy, Threat activity

automated calibration: not run · See the Methodology page for how scores are produced

Trend

A trend needs at least two monthly points; there is only one so far.

Automated coverage

Limited automated coverage

Automated coverage is limited: some official sources cannot currently be read, so the content below may be incomplete.
Last run (2026-10-12): 5 of 6 tier-1 sources readable.
Register areas only partly verified: personal data, cross-border data, incident reporting, regulator
Register areas not yet verified: cybersecurity, critical infrastructure, telecom security, cybercrime, finance sector rules, telecom sector rules

This means some official sources cannot currently be read automatically, so this page may be incomplete. It does not mean the related laws or events do not exist.

Policy and regulation

Laws and regulations

Basic Act on the Development of Artificial Intelligence and the Establishment of a Trustworthy Foundation

Basic Act on the Development of Artificial Intelligence and the Establishment of a Trustworthy Foundation (Basic Act on the Development of Artificial Intelligence and the Establishment of a Trustworthy Foundation (AI Basic Act)): in force, As of 2026-10-12 · Source (opens in a new window)
Personal Information Protection Act

Personal Information Protection Act (Personal Information Protection Act (개인정보 보호법)): in force, As of 2026-10-12 · Source (opens in a new window)
Act on Promotion of Information and Communications Network Utilization and Information Protection (unofficial English translation of the name)

Status under re-verification · Last verified: 2026-10-05 · Source (opens in a new window)
Act on the Protection of Information and Communications Infrastructure (unofficial English translation of the name)

Status under re-verification · Last verified: 2026-10-12 · Source (opens in a new window)

For information only; this is not legal advice. AI-assisted translation; the primary-language version prevails.

Threat landscape

Threat items are not yet attributed to this jurisdiction.

Industry focus

Industry focus will be generated once sourced material exists.

Compliance points

personal data

Verification state: Partly verified

Personal Information Protection Act

Personal Information Protection Act (Personal Information Protection Act (개인정보 보호법)): in force, As of 2026-10-12 · Source (opens in a new window)

cross-border data

Verification state: Partly verified

Personal Information Protection Act

Personal Information Protection Act (Personal Information Protection Act (개인정보 보호법)): in force, As of 2026-10-12 · Source (opens in a new window)

incident reporting

Verification state: Partly verified

Personal Information Protection Act

Personal Information Protection Act (Personal Information Protection Act (개인정보 보호법)): in force, As of 2026-10-12 · Source (opens in a new window)
Act on Promotion of Information and Communications Network Utilization and Information Protection (unofficial English translation of the name)

Status under re-verification · Last verified: 2026-10-05 · Source (opens in a new window)

regulator

Verification state: Partly verified

No record can be shown from the Law Register yet.

Notes for ICT equipment suppliers

This section is based on publicly available sources only.

Suggested checks

cross-border data
Check what Personal Information Protection Act requires of ICT equipment suppliers and operators.
Source (opens in a new window)
incident reporting
Check what Personal Information Protection Act requires of ICT equipment suppliers and operators.
Source (opens in a new window)

Latest updates

No recent updates yet.