How to comply with the South Korea AI Basic Act
South Korea AI Basic Act
- Status
- In force
- Binding
- Yes
- Object analysed
- AI system
- Requirements
- 7
- Next milestone
- Jan 2027
In short
Second horizontal law after the EU. High-impact AI, generative AI labelling, local representative for foreign operators, safety of high-compute models.
Steps to compliance
- Qualify each AI systemAxes to decide: Category.
- Determine your roleDuties vary by role: Developing operator and Using operator.
- Apply the 7 requirementsThey focus on: Risk management, Transparency & notice, Synthetic content and Inventory & categorisation.
- Prove it with checks11 checks to document, 11 of which also serve AI Act, PL 2338 and CoE Convention.
- Track the deadlinesNext milestone: Jan 2027, Announced end of the fine grace period (potential).
Scope and penalties
- Kind
- Statute
- Scope
- Operators developing or using AI, including foreign ones above thresholds.
- Territorial reach
- Activities affecting the Korean market or users.
- Penalties
- Administrative fine up to KRW 30M; grace period of at least one year on fines.
- Jurisdiction
- South Korea
Timeline
Qualifying a system
Classification axes and possible verdicts
Category
Requirements
7 requirements
| Code | Article | Requirement | Applies to | Checks |
|---|---|---|---|---|
| KR-01 | Art. 31(1) | Notify in advance of high-impact or generative AI use | ||
| KR-02 | Art. 31(2), (3) | Label generated content and flag deepfakes | ||
| KR-03 | Art. 33 | Self-assess whether the system is high-impact | ||
| KR-04 | Art. 34 | High-impact measures: risk management, explainability, user protection, oversight, documentation | ||
| KR-05 | Art. 35 | Fundamental rights impact assessment (best effort) | ||
| KR-06 | Art. 32 | Safety of high-compute models | ||
| KR-07 | Art. 36 | Domestic representative for foreign operators |
Checks to document
Evidence collected for a check counts for every regulation that uses it.
| Code | Check | Scope | Themes | Also used by |
|---|---|---|---|---|
| VER-018-D-01 | Persons informed of the interaction with an AI system | System | ||
| VER-018-D-03 | AI-generated content marked as such | System | ||
| CHK-CATEGORIZATION | AI system tasks and methods are categorized (classifier, generative, recommender) | System | ||
| VER-003-01 | Documented and up-to-date risk register | System | ||
| VER-033-D-02 | System explanation capability verified | System | ||
| VER-008-02 | System designed to allow human oversight (stop button, override) | System | ||
| VER-005-01 | Complete technical documentation compliant with Annex IV | System | ||
| VER-020-D-01 | FRIA carried out in accordance with Art. 27 | System | ||
| VER-032-G-02 | Systemic risks assessed and mitigation measures documented | Model | ||
| VER-032-G-03 | Serious incidents documented and reported to the AI Office | Model | ||
| VER-025-F-01 | Authorised representative appointed by written mandate | Organisation |
Themes covered
Frequently asked questions
Who is in scope of AI Basic Act?
Operators developing or using AI, including foreign ones above thresholds. Activities affecting the Korean market or users.
What penalties does AI Basic Act carry?
Administrative fine up to KRW 30M; grace period of at least one year on fines.
When do the AI Basic Act obligations apply?
Jan 21, 2025: Promulgated; Jan 22, 2026: Entry into force; Jan 2027: Announced end of the fine grace period.
Is AI Basic Act binding?
Yes. Kind: statute. Status: in force.
How does AI Basic Act relate to other regulations?
The same checks serve several texts. Shared checks: AI Act (10), PL 2338 (7) and CoE Convention (4).
Related regulations
Official sources
Data checked on Sep 25, 2026. General information, not legal advice. Check the official texts and get advice for your situation.
Run these requirements across all your AI systems
TrustFlow inventories your systems, qualifies them under each regulation and collects evidence once for every referential.