Refresh delayed

Jurisdiction · 2 regulations

South Korea: data, AI and cyber laws

2 regulations in South Korea that affect companies handling data: South Korea AI Basic Act, South Korea PIPA. Part of APAC.

2 regulations

Add to calendar

Apple Calendar or Outlook Google Calendar Download .ics

Sort

	Status
South Korea PIPA Personal Information Protection Act (as amended by Act No. 21445, 2026)	Amended	Sep 30, 2011	Jul 1, 2027 (in 9 months) Mandatory ISMS-P certification
South Korea AI Basic Act Framework Act on the Development of Artificial Intelligence and Establishment of a Foundation for Trust (AI Basic Act)	In force	Jan 22, 2026	None upcoming

South Korea PIPA
South Korea
AmendedPrivacyBreach notification
Next: Jul 1, 2027 Mandatory ISMS-P certification
South Korea AI Basic Act
South Korea
In forceAI
Effective Jan 22, 2026

Upcoming deadlines

July 20271 deadline

Jul12027
South Korea PIPASouth Korea
Mandatory ISMS-P certification
ISMS-P certification becomes mandatory for private entities meeting the statutory criteria.
Compliance deadlinein 9 monthsSource

Past deadlines

September 20261 deadline

Sep112026
South Korea PIPASouth Korea
2026 PIPA amendments take effect
10%-of-revenue fines, CEO accountability, and notice duties for possible breaches apply.
Takes effect13 days agoSource

March 20261 deadline

Mar102026
South Korea PIPASouth Korea
2026 PIPA amendment promulgated (Act No. 21445)
Amendment raising fines to 10% of revenue and adding CEO accountability promulgated.
Transition7 months agoSource

January 20261 deadline

Jan222026
South Korea AI Basic ActSouth Korea
AI Basic Act and Enforcement Decree take effect
Transparency, labeling, high-impact AI, and domestic representative obligations apply (fines deferred during the grace period).
Takes effect8 months agoSource

When the rules change: new data, privacy and AI laws and deadlines, the next morning.