South Korea: Framework Act on the Development of Artificial Intelligence and the Establishment of a Foundation for Trust (인공지능 발전과 신뢰 기반 조성 등에 관한 기본법)
Providers of high-impact AI, meaning systems that may seriously affect life, safety or fundamental rights in listed areas, must run a risk management plan, explain outcomes where technically feasible, protect users, keep human management and supervision, and keep documents showing their safety measures; users must be told in advance when a service runs on high-impact or generative AI. Providers of AI trained above a compute threshold must identify, assess and mitigate risks over the lifecycle, build a system to monitor and respond to AI safety incidents, and submit the results to the Minister.
Scope. Art. 4 applies the Act to acts abroad that affect the Korean market or users, and Art. 36 requires a foreign AI business above decree thresholds with no Korean address or office to designate a domestic agent.
Draft mapping. Drafted by the Register's agents from the rule's text and not yet confirmed by a person. It is the Register's reading, not legal advice: whether and how the rule applies to you is a question for counsel.
Controls this rule maps to
Required by the text The rule's text requires a measure that is this control, or plainly includes it. Implied A binding rule whose purpose needs this control, but whose text does not name it. The Register's reading. Recommended A voluntary standard or guidance recommends it; nothing binds you to it. Proposed Appears in a proposed rule or proposed provision that is not yet in force.
| Control | Strength | Where in the rule, and why | Confidence | Missing or failed in |
|---|---|---|---|---|
| Human takeover with a time window C-R3 | Implied | Art. 34(1) item 4 (원문 '고영향 인공지능에 대한 사람의 관리ㆍ감독'). | medium | 2 cases |
| Organizational recovery process C-R4 | Required by the text | Art. 32(1) item 2 and Art. 32(2) as quoted; applies only above the compute threshold set by Presidential Decree. | medium | 1 case |
| Warnings designed as alerts C-I4 | Implied | Art. 32(1) item 2 (안전사고를 모니터링). | low | 4 cases |
| Mandate disclosed to supervisor C-M1 | Implied | Art. 31(1) (원문 '... 해당 인공지능에 기반하여 운용된다는 사실을 이용자에게 사전에 고지하여야 한다') — translation: must notify users in advance that the product or service operates on that AI; Art. 34(1) item 2. | medium | 1 case |
| Reporting integrity C-V2 | Implied | Art. 34(1) item 5 (원문 '안전성ㆍ신뢰성 확보를 위한 조치의 내용을 확인할 수 있는 문서의 작성과 보관'). | low | 1 case |