Progress

Current status
adopted
01 Apr 2027 in force
01 Oct 2026 in grace period
31 Mar 2026 adopted
20 Mar 2026 adopted
24 Nov 2025 under deliberation

Scope

Implementers
Republic of Korea
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
infrastructure provider: internet and telecom services
Government Branch
executive
legislature
Government Body
central government
parliament
Implementation Level
national

Timeline of events

01 Apr 2027
in force

Information Security Level Evaluation obligations in Act on Promotion of Information and Communications Network Utilization and Information Protection (Law No. 21500) enter into force

On 1 April 2027, the Information Security Level Evaluation obligations in the Act on Promotion of Information and Communications Network Utilization and Information Protection (Law No. 21500) enter into force. The Korea Ministry of Science and ICT m…

Source
Event type law
Action type implementation
Government branch executive
Government body central government
01 Oct 2026
in grace period

Incident response and user notification obligations in Act on Promotion of Information and Communications Network Utilization and Information Protection (Law No. 21500) enter into force

On 1 October 2026, the incident response, user notification, and organisational obligations in the Act on Promotion of Information and Communications Network Utilization and Information Protection (Law No. 21500) enter into force. Major information …

Source
Event type law
Action type in force with grace period
Government branch executive
Government body central government
31 Mar 2026
adopted

President signed Bill amending Network Act including incident response obligations and enforcement measures

On 31 March 2026, the President of Korea promulgated the Act on Promotion of Information and Communications Network Utilization and Information Protection as Law No. 21500. The Bill includes provisions on incident response and enforcement. It applie…

Source
Event type law
Action type signing
Government branch executive
Government body central government
20 Mar 2026
adopted

National Assembly adopted Bill amending Network Act including incident response obligations and enforcement measures

On 20 March 2026, the Bill amending the Network Act, including incident response obligations and enforcement measures, was adopted by the National Assembly. The Bill includes provisions on incident response and enforcement. It applies to information…

Source
Event type law
Action type adoption
Government branch legislature
Government body parliament
24 Nov 2025
under deliberation

Bill amending Network Act including incident response obligations and enforcement measures was introduced to National Assembly

On 24 November 2025, a Bill amending the Network Act was introduced to the National Assembly. The Bill includes provisions on incident response and enforcement. It applies to information and communications service providers, including major provider…

Source
Event type law
Action type introduction
Government branch legislature
Government body parliament