Asia-Pacific · 3 laws · 12 requirements
South Korea: the laws your website or app must follow
If your customers are in South Korea, these are the privacy, consumer, security, accessibility and AI laws SafeLaunch checks your site against, with what each one requires and where in the law it says so.
How a SafeLaunch audit checks each one
- CheckedChecked automatically on every scan
- AI reviewLooked for by the AI analysis, reported only with evidence
- Your answersDecided from your answers to the audit questions
- PreparedPrepared for you in the report's compliance pack
- You confirmA scan can't see this; you need to confirm it
PIPA
In force; 2023 amendments (automated-decision rights since 15 Mar 2024).
Who it covers: Personal information controllers handling data of people in Korea.
What it requires of a website or app (8)
- A privacy policy: items collected, purposes, retention, third parties, rights, the privacy officer's name and contactCheckedArt. 30
- Separate consent for each purpose, with what's required and optional shownCheckedArt. 15, 22
- Designate a chief privacy officerCheckedArt. 31
- Parental consent for children under 14Your answersArt. 22-2
- Safety measures (access control, encryption)CheckedArt. 29
- Breach notification to individuals and the PIPC within 72 hoursCheckedArt. 34
- Rights to refuse or ask for an explanation of fully automated decisionsAI reviewArt. 37-2
- Tell users in advance that a service uses generative AI, and label AI-generated content (if if the product uses AI)CheckedAI Basic Act (transparency duties)
Sources:PIPC AI Basic Act overview (Cooley)
AI Basic Act (from 22 Jan 2026)
In force since 22 Jan 2026.
Who it covers: Businesses providing AI products or services in South Korea.
What it requires of a website or app (3)
- Users are told in advance that a product or service uses generative or high-impact AI (if if the product uses AI)CheckedFramework Act on AI (transparency duties)
- Generative AI outputs are labelled as AI-generated; deepfakes are clearly marked (if if you provide generative AI)AI reviewFramework Act on AI (labelling duties)
- High-impact AI (health, hiring, credit, essential services) has risk management and human oversight (if if AI makes decisions about people)Your answersFramework Act on AI (high-impact AI)
Sources:Korea Law Information Center
Network Act (youth-harmful media)
In force.
Who it covers: Information and communications service providers in South Korea.
What it requires of a website or app (1)
- Media harmful to youth is labelled and access requires age verification (if if you publish adult or mature content)CheckedArt. 42 & 42-2
Sources:Korea Law Information Center
Check your site against South Korea's rules
A free scan checks your website or app against these rules in about a minute and shows what applies, with evidence from your pages. The full report gives the exact fix for each finding.
Check my site freeOne free fix in your inbox each week
A new copy-paste prompt for Lovable, Cursor or Claude Code every week, with the rule behind it and how to check it worked, plus the Monday briefing on new laws and deadlines. No spam, unsubscribe in one click.
By signing up you agree to get these weekly emails. We send it with Kit, and you can unsubscribe at any time. What we share with Kit is in our privacy notice.
A plain-language summary of what each law requires of a website or app, from the SafeLaunch rulebook, with the provision and official sources. It is not legal advice and not every duty in each law is listed.