South Korea. ePrivacy / marketing. Act

Network ActAct on Promotion of Information and Communications Network Utilization and Information Protection (정보통신망법)

In force

Partly verified

Medium confidence. Enactment form/date (renamed 2001 from earlier 1987 law) from general knowledge. [Link: official Korean (law.go.kr); KLRI official English (Jan 2023 version)]

§1Summary

Synopsis

Korea's main online services law; after the 2020 reform moved its personal data rules into PIPA, it still governs electronic advertising consent, information security and incident reporting for ICT service providers.

Key themes

advertising consent
opt-out
sender identification
information security
incident reporting
ISMS

Unique features

Explicit prior consent for commercial electronic messages, with periodic consent re-confirmation.

SaaS relevance

SaaS sending marketing to Korean users or operating ICT services in Korea must follow its ad consent and security incident rules.

§2Obligations

Breach notification: Security incidents reported to MSIT/KISA

§3Dates

Key dates

Adopted 2001
In force 1 July 2001

§4Text and authority

Text

Authoritative text law.go.kr
English text elaw.klri.re.kr

Authority

Ministry of Science and ICT (MSIT) / Korea Communications Commission (KCC)

§5Where it applies

Domestic law of: South Korea

§6Sources and verification

Verification

Medium confidence.

Partly verified

Medium confidence. Enactment form/date (renamed 2001 from earlier 1987 law) from general knowledge. [Link: official Korean (law.go.kr); KLRI official English (Jan 2023 version)]