Cybersecurity Database

Law

Korea's Information and Communications Network Act

Act on Promotion of Information and Communications Network Utilization and Information Protection

In force since 1 July 2001Record checked against the official source on 29 October 2026 · Methodology

Official source: https://www.law.go.kr/%EB%B2%95%EB%A0%B9/%EC%A0%95%EB%B3%B4%ED%86%B5%EC%8B%A0%EB%A7%9D%EC%9D%B4%EC%9A%A9%EC%B4%89%EC%A7%84%EB%B0%8F%EC%A0%95%EB%B3%B4%EB%B3%B4%ED%98%B8%EB%93%B1%EC%97%90%EA%B4%80%ED%95%9C%EB%B2%95%EB%A5%A0

Official source
Official number
Act No. 6360
Date adopted
Entry into force

Summary

It is Korea's main law on the security of information and communications networks and services in the private sector. It requires service providers to take protective measures and appoint a chief information security officer (CISO), who since 2026 must be an executive; major operators and data centres must obtain information security management system (ISMS) certification. Under the amendment promulgated on 31 March 2026 and in force since 1 October 2026, providers must report intrusions to the Ministry of Science and ICT or KISA within 24 hours of becoming aware of them and notify affected users of the most serious incidents without delay. The ministry can order cause analysis and corrective measures, supported by an incident investigation review committee, and impose surcharges of up to 3% of turnover when two or more incidents caused by intent or gross negligence occur within five years. The Act also covers spam, illegal content and the protection of minors online.

Who it applies to

Information and communications service providers (telecommunications operators and those providing or intermediating information through their services) and network operators, with stricter duties for major operators, data centres and the largest providers by assets or turnover.

Key dates

  1. Amendment promulgated (Act No. 21500) introducing 24-hour incident reporting and penalties for repeated incidents
  2. 24-hour incident reporting, user notification and the surcharge of up to 3% of turnover for repeated incidents take effect

Information

Jurisdiction
South Korea
Issuing body
National Assembly of the Republic of Korea
Type
Law
Available languages
Korean
Topics
Notes
The current title dates from the full amendment by Act No. 6360 of 16 January 2001, in force since 1 July 2001. The link points to the text in force on the Ministry of Government Legislation's National Law Information Center: as of 29 October 2026 it is the version in force since 2 October 2026 (Act No. 21988 of 29 September 2026), which follows the main amendment (Act No. 21500 of 31 March 2026, in force since 1 October 2026; Article 45-5 from 1 April 2027). The 24-hour report is not required if the incident has already been reported under another law. The incident investigation review committee will remain in place until 3 December 2030.

Record details

Original title
정보통신망 이용촉진 및 정보보호 등에 관한 법률
Title in other languages
  • Legge sulla promozione dell'uso delle reti di informazione e comunicazione e sulla protezione delle informazioni
  • Loi sur la promotion de l'utilisation des réseaux d'information et de communication et la protection de l'information
  • Ley de promoción del uso de las redes de información y comunicación y de protección de la información
  • Gesetz zur Förderung der Nutzung von Informations- und Kommunikationsnetzen und zum Schutz von Informationen
Licence / terms of use
Public domain / official act – Statutes are excluded from copyright protection (Art. 7 of the Korean Copyright Act).
Collected from
manual entry
Last verified
(verified via web)

How to cite

APA

National Assembly of the Republic of Korea. (2001). 정보통신망 이용촉진 및 정보보호 등에 관한 법률 (Act No. 6360). https://www.law.go.kr/%EB%B2%95%EB%A0%B9/%EC%A0%95%EB%B3%B4%ED%86%B5%EC%8B%A0%EB%A7%9D%EC%9D%B4%EC%9A%A9%EC%B4%89%EC%A7%84%EB%B0%8F%EC%A0%95%EB%B3%B4%EB%B3%B4%ED%98%B8%EB%93%B1%EC%97%90%EA%B4%80%ED%95%9C%EB%B2%95%EB%A5%A0

Chicago

National Assembly of the Republic of Korea. "정보통신망 이용촉진 및 정보보호 등에 관한 법률." 16 January 2001. https://www.law.go.kr/%EB%B2%95%EB%A0%B9/%EC%A0%95%EB%B3%B4%ED%86%B5%EC%8B%A0%EB%A7%9D%EC%9D%B4%EC%9A%A9%EC%B4%89%EC%A7%84%EB%B0%8F%EC%A0%95%EB%B3%B4%EB%B3%B4%ED%98%B8%EB%93%B1%EC%97%90%EA%B4%80%ED%95%9C%EB%B2%95%EB%A5%A0.

BibTeX

@misc{kr_information_communications_network_act_2001,
  author       = {{National Assembly of the Republic of Korea}},
  title        = {{정보통신망 이용촉진 및 정보보호 등에 관한 법률}},
  year         = {2001},
  note         = {Act No. 6360},
  url          = {https://www.law.go.kr/%EB%B2%95%EB%A0%B9/%EC%A0%95%EB%B3%B4%ED%86%B5%EC%8B%A0%EB%A7%9D%EC%9D%B4%EC%9A%A9%EC%B4%89%EC%A7%84%EB%B0%8F%EC%A0%95%EB%B3%B4%EB%B3%B4%ED%98%B8%EB%93%B1%EC%97%90%EA%B4%80%ED%95%9C%EB%B2%95%EB%A5%A0},
  urldate      = {2026-10-29}
}

Metadata and summary: CC BY 4.0 · JSON