Republic of Korea: Bill amending Network Act including incident response obligations and enforcement measures (Bill No. 2214896/Law No. 21500)
Progress
Scope
Timeline of events
Information Security Level Evaluation obligations in Act on Promotion of Information and Communications Network Utilization and Information Protection (Law No. 21500) enter into force
On 1 April 2027, the Information Security Level Evaluation obligations in the Act on Promotion of Information and Communications Network Utilization and Information Protection (Law No. 21500) enter into force. The Korea Ministry of Science and ICT m…
Incident response and user notification obligations in Act on Promotion of Information and Communications Network Utilization and Information Protection (Law No. 21500) enter into force
On 1 October 2026, the incident response, user notification, and organisational obligations in the Act on Promotion of Information and Communications Network Utilization and Information Protection (Law No. 21500) enter into force. Major information …
President signed Bill amending Network Act including incident response obligations and enforcement measures
On 31 March 2026, the President of Korea promulgated the Act on Promotion of Information and Communications Network Utilization and Information Protection as Law No. 21500. The Bill includes provisions on incident response and enforcement. It applie…
National Assembly adopted Bill amending Network Act including incident response obligations and enforcement measures
On 20 March 2026, the Bill amending the Network Act, including incident response obligations and enforcement measures, was adopted by the National Assembly. The Bill includes provisions on incident response and enforcement. It applies to information…
Bill amending Network Act including incident response obligations and enforcement measures was introduced to National Assembly
On 24 November 2025, a Bill amending the Network Act was introduced to the National Assembly. The Bill includes provisions on incident response and enforcement. It applies to information and communications service providers, including major provider…