Duty LXD-4263
Deploys a companion chatbot, in South Korea
Information and Communications Network Act, Report on Computer Security Incidentssince 3 lines
Arts. 48-3 and 48-4 of the Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc. (Act No. 20069, ) · Read the law's page
- Immediately report a computer security incident to the Minister of Science and ICT or to the Korea Internet and Security Agency upon discovering it; a report already made for the same incident under another statute satisfies this duty and need not be repeated.
- A person who operates an information and communications network, a provider of information and communications services included, must analyze the cause of the incident, respond based on the results of that analysis, and take measures to keep the resulting damage at bay (Article 48-4(1)).
- Preserve data when the Minister of Science and ICT orders it, and submit on the Minister's demand the data needed to analyze the incident's cause; submitting false data or refusing to submit it is separately finable, and failing to preserve data after an order to do so is a criminal offense (Article 73, item 6).
- The reporting and data duties below bind a provider of information and communications services, the Act's own broad term for a person who, for profit, provides information or acts as an intermediary in providing information using a telecommunications business operator's services, with no revenue or user threshold gating these duties; a separate certification duty in this Act binds only a designated information and communications service provider identified by revenue or user count and is not raised here. The cause-analysis duty in Article 48-4(1) reaches any person who operates an information and communications network, a provider included.
AI Framework Act, Article 31 (transparency obligations for AI outputs)since 1 line
Act No. 20676, Article 31 · Read the law's page
- Notify users when content they see was produced by generative AI
Enforcement Decree of the AI Framework Act, Article 23 (method of notice and AI-generated indication)since 3 lines
Presidential Decree No. 36053, Article 23 · Read the law's page
- Before you offer a product or service that uses high-impact or generative AI, tell users that it runs on that AI: state it on the product or in a contract, manual or terms of use, show it on the user's screen or device, post it where the product or service is provided, or use another method the Minister recognizes.
- Mark AI-generated output either in a way people can perceive or in a machine-readable way, and where the mark is machine-readable also tell users at least once, in text or voice, that generative AI produced the output.
- Give the notice or indication for virtual sound, image or video that is difficult to distinguish from reality in a way the user can clearly recognize, taking account of the main users' age and physical and social conditions.