South Korea - AI Industry Promotion (AIPTRXX/2022)
AI Industry Promotion and Trust-Building Bill
AI 산업 진흥 및 신뢰 구축 법안
South Korea
RAI-KR-NA-AIPTRXX-2022South Korea - AI Industry Promotion (AIPTRXX/2022) is Proposed in South Korea, according to likms.assembly.go.kr. We have not yet been able to confirm the status.
BillGovernance and OversightRisk ManagementConformity Assessment and RegistrationProposed by Rep. Yoon Doo‑hyun on 7 December 2022, the 'AI Industry Promotion and Trust‑Building' bill aimed to promote AI industry development while establishing baseline measures to secure public trust. The draft emphasized a pro‑innovation principle (often described as 'prior permission, subsequent regulation' / 'prior permissive, post‑regulatory' approach), introduced obligations for high‑risk AI uses (disclosure and reliability measures), and proposed governance structures for national AI strategy coordination.
Summary
Background and purpose: The 'AI Industry Promotion and Trust‑Building' bill (proposed 2022‑12‑07 by Rep. Yoon Doo‑hyun) was presented amid rapid diffusion of large‑scale generative AI systems and a national debate in South Korea on how to balance industrial promotion and public safety/trust. The bill sought to provide a statutory basis for comprehensive AI industry promotion measures (funding, incentives, ecosystem support) while creating baseline trust and transparency obligations for certain AI uses. The proposal became a focal point of subsequent consolidation efforts in the National Assembly, and elements of it were later incorporated into broader 'AI basic law' debates and committee alternatives that culminated in the AI Basic Law adopted by the 22nd National Assembly in late 2024.
Core policy approach: The bill favored a pro‑innovation regulatory stance commonly summarized in Korean reporting as '우선허용·사후규제' (prior permissive / ex‑post regulation) — i.e., enabling development and market introduction of AI products and services unless they specifically threaten life, safety or fundamental rights. At the same time, it sought to limit that permissive approach by requiring targeted measures for what it identified as 'high‑risk' AI uses: advance user notice requirements, mandated reliability/safety measures, and documentation and disclosure duties for operators of such systems. The dual aim was to accelerate domestic AI industry capacity while creating enforceable minimum trust safeguards.
Key institutional elements: The bill envisioned (a) a national coordination function and multi‑year basic plans for AI promotion and trust policies; (b) a designated national AI support/coordination body (a national AI center or equivalent) to administer grants, technical assistance, and cluster policies; and (c) responsibilities for line ministries (notably the Ministry of Science and ICT) to carry out standards, certification and oversight tasks. Reporters and stakeholder submissions indicate that the proposal served as the basis for inter‑party consolidation and the committee 'alternative' that later became the AI Basic Law package adopted in December 2024.
Obligations and risk approach: The bill introduced a tiered approach to obligations — general promotion measures applying broadly, and stricter obligations for AI used in high‑risk domains (healthcare, finance, employment/recruitment, critical infrastructure, public safety, electoral processes). For those uses the draft required prior notice to users, documentation demonstrating reliability, and operational risk‑management systems. It also contained provisions to encourage voluntary certification and conformity assessment processes and to allow government fact‑finding and requests for technical information in the context of suspected non‑compliance.
Stakeholder reaction and evolution: Industry stakeholders generally welcomed the promotion/innovation emphasis but expressed concerns about burdens from disclosure and conformity requirements. Civil society and human‑rights bodies pushed back on 'prior permissive' language, warning that ex‑post enforcement alone may be insufficient to protect rights. These tensions contributed to extended committee deliberations and eventual consolidation of multiple parliamentary bills into the AI Basic Law passed 26 December 2024. Many of the bill's promotion provisions and some trust/transparency elements were integrated into the consolidated law, even where text and enforcement modalities were modified.
Status and outcome: Although the Yoon Doo‑hyun bill as originally tabled did not become a standalone statute, its contents influenced committee-level alternatives and the national AI basic law framework adopted in late 2024. For archival and legislative tracking, refer to the National Assembly's 의안정보시스템 and stakeholder submissions such as the Business Software Alliance (BSA) commentary on the proposal.
Full article
Read full text ↗Overview
The 'AI Industry Promotion and Trust‑Building' bill submitted by Representative Yoon Doo‑hyun on 7 December 2022 was framed as a dual‑track legislative proposal that combined statutory measures to promote South Korea's AI industry with baseline legal duties to secure public trust in AI products and services. The bill gained attention because it explicitly embodied a 'prior permissive, subsequent regulatory' approach (Korean: 우선허용·사후규제) — an orientation aimed at rapid industrial deployment while reserving ex‑post corrective powers for harms. That design made the bill a nucleus for subsequent legislative consolidation and debate. For a snapshot of the bill and its role in later legislative consolidation see the National Assembly information portal and contemporaneous analyses such as press coverage and stakeholder submissions. For the National Assembly bill information system see National Assembly — Bill Search. For stakeholder input on this specific proposal see the Business Software Alliance submission at BSA (submission on bill #18726).
Definitions
The proposal defined key terms to draw regulatory boundaries: 'Artificial Intelligence' (broad systems that perform tasks using algorithms and data), 'high‑risk AI' (AI used in areas with significant potential impacts on life, safety, fundamental rights or public order), 'AI business operator' (entities that develop, provide, or operate AI systems), and 'generative/large‑scale AI' (models that produce text, images or other content). The draft typically aligned definitions pragmatically with existing Korean IT and data laws to facilitate inter‑operation across ministries and avoid duplicative definitions. Definitional choices were central to later debate because they determine the suite of systems subject to mandatory safeguards and disclosure duties.
Governance and Institutional Framework
The bill proposed a layered governance architecture: (1) a national coordinating mechanism to set strategic priorities and the multi‑year basic plan; (2) a national AI support center to execute promotion policy (grants, tech assistance, clusters); and (3) delegated authority to line ministries for sectoral enforcement. In committee debates these roles were debated intensively with proposals to place the oversight body under the President, the Prime Minister, or as an expert council. The practical duties assigned to the Ministry of Science and ICT (and related agencies) included preparation of a 3‑year AI basic plan, standards and conformity coordination, and operational oversight of reliability testing and certification programs. See contemporaneous reporting on committee consolidation for details: Maeil Business (MK) and legislative trackers such as Hankyung — Legislative Explorer.
Key Focus Areas
The proposal focused on the following substantive policy areas: industry promotion (funding, cluster/center supports, public‑private partnership incentives), tiers of AI risk governance (lighter rules for low‑risk experimentation; higher obligations for high‑risk uses), transparency (notice to users when services rely on AI and explicit labelling for generative AI outputs), trust and reliability (documentation, technical records, risk management systems), conformity and certification (voluntary-to-mandatory pathways for high‑risk AI), and enforcement (administrative corrective powers and sanctions for non‑compliance). The bill's high‑risk category list (healthcare, finance, employment, public administration, critical infrastructure) reflected international practice and was a central point of debate because it triggered stronger duties for operators. For press analysis of the tension between innovation and safety see AJU News.
Implementation Framework
Implementation was designed to be operationalized by the Ministry of Science and ICT in cooperation with other ministries and a designated national AI center. The bill included provisions for: issuing implementing regulations (presidential/delegated acts) to specify technical standards for disclosure and documentation; a phased approach for sectoral implementation of high‑risk obligations; pilot certification programs to foster domestic conformity assessment capacity; and funding authorizations for industry promotion and public interest research. The framework envisioned a mix of obligatory duties for clearly‑defined high‑risk applications and supportive measures (grants, training, R&D tax incentives) to accelerate domestic capability building.
Monitoring and Evaluation
Monitoring relied on periodic reporting obligations by AI business operators, obligations to retain technical documentation and logs, and government fact‑finding powers to request or inspect records. The bill proposed 3‑year strategic reviews tied to the national AI basic plan and required publication of progress reports to improve policy transparency. It also envisioned metrics for industry growth and safety incidents to evaluate whether the preferential promotional regime was generating acceptable trade‑offs between innovation and public protection.
Penalties, Liability, and Appeals
To balance promotion with enforceability the bill established administrative enforcement tools: corrective orders, administrative fines, temporary suspension of services and, in serious cases, referral for criminal investigation under existing statutes where willful misconduct or gross negligence caused harm. It further provided for administrative review and judicial appeal rights for regulated entities. The exact quantum of fines and procedural details were left to implementing regulations or later legislative consolidation, which became a point of negotiation in committee proceedings.
Relationship to Other Instruments
The bill was drafted to interact with South Korea's existing legal ecosystem: the Personal Information Protection Act (privacy/data), telecom and electronic communications law (network safety), consumer protection statutes, product safety frameworks, and sectoral rules (health, finance). It proposed regulatory coordination mechanisms to reduce overlap and set rules for cross‑border data flows when relevant. The need to align with other domestic laws and with international instruments (e.g., EU AI Act trends) was frequently highlighted by stakeholders.
International Alignment
The bill explicitly sought to position South Korea competitively with major AI jurisdictions by adopting a pro‑innovation stance while importing elements of international best practice (risk‑based focus, transparency duties for generative systems, conformity pathways). Internationally‑oriented provisions included support for cross‑border testing programs, recognition of foreign certificates where appropriate, and encouragement for industry to comply with international standards to facilitate export competitiveness. Commentators noted parallels and divergences with the EU AI Act and UK 'pro‑innovation' approaches, and recommended continued alignment where practicable.
Implementation Timeline
| Milestone | Date / Planned Date |
|---|---|
| Bill proposed (Rep. Yoon Doo‑hyun) | 2022‑12‑07 |
| Stakeholder submissions (BSA commentary) | 2023‑02‑13 |
| Committee consolidation & alternative drafting | 2023–2024 (iterative) |
| AI Basic Law (consolidated package) — National Assembly passage | 2024‑12‑26 (consolidated law passed into AI Basic Law) |
Sources and References
| Source | Type |
|---|---|
| National Assembly — Bill Search / 의안정보시스템 | Primary Source (legislative information system) |
| BSA — Submission on '인공지능 육성 및 신뢰 확보에 관한 법률안' (Bill #18726) | Primary Source (stakeholder submission) |
| Maeil Business (MK) — coverage of committee progress | Secondary / Press |
| AJU News — reporting on Rep. Yoon's advocacy | Secondary / Press |
Requirements for a company
What an organisation has to do under South Korea - AI Industry Promotion (AIPTRXX/2022), at a glance. Not legal advice — the table below gives the provision and deadline for each item.
Not yet in force (Proposed). These requirements apply once the instrument takes effect and may change before then.
Must do
9- Assess if your AI system falls within high-risk categories.All AI business operators.
- Implement and maintain robust risk management systems for AI systems.Operators of high-risk AI systems.
- Maintain comprehensive technical documentation and logs for AI systems.Operators of high-risk and large-scale AI systems.
- Engage in conformity assessment and certification programs for high-risk AI systems.Providers of high-risk AI systems.
- Provide prior notice to users when services rely on high-risk AI.Providers of high-risk AI systems.
- Explicitly label outputs generated by generative AI systems.Providers of generative AI systems.
- +3 more in the table below
Must not do
0Nothing in this category.
Should do
0Nothing in this category.
Should not do
0Nothing in this category.
Who must do what
The obligations under South Korea - AI Industry Promotion (AIPTRXX/2022), most serious first. Not legal advice — verify against the official text before relying on it.
| # | Who | Requirement | By when | Where | Severity |
|---|---|---|---|---|---|
| 1 | All AI business operators. | Assess if your AI system falls within high-risk categories. “tiers of AI risk governance (lighter rules for low‑risk experimentation; higher obligations for high‑risk uses)” | Before placing on market | — | Critical |
| 2 | Operators of high-risk AI systems. | Implement and maintain robust risk management systems for AI systems. “trust and reliability (documentation, technical records, risk management systems)” | Before placing on market | — | Critical |
| 3 | Operators of high-risk and large-scale AI systems. | Maintain comprehensive technical documentation and logs for AI systems. “obligations to retain technical documentation and logs” | Continuously from development | — | Critical |
| 4 | Providers of high-risk AI systems. | Engage in conformity assessment and certification programs for high-risk AI systems. “conformity and certification (voluntary-to-mandatory pathways for high‑risk AI)” | Before placing on market | — | Critical |
| 5 | Providers of high-risk AI systems. | Provide prior notice to users when services rely on high-risk AI. “transparency (notice to users when services rely on AI and explicit labelling for generative AI outputs)” | Before providing service to users | — | Critical |
| 6 | Providers of generative AI systems. | Explicitly label outputs generated by generative AI systems. “transparency (notice to users when services rely on AI and explicit labelling for generative AI outputs)” | Before providing service to users | — | Critical |
| 7 | AI business operators. | Comply with technical standards for disclosure and documentation specified in implementing regulations. “issuing implementing regulations (presidential/delegated acts) to specify technical standards for disclosure and documentation” | Upon entry into force of implementing regulations | — | Critical |
| 8 | All AI business operators subject to oversight. | Cooperate fully with government fact-finding requests and inspections of records. “government fact‑finding powers to request or inspect records.” | Upon request | — | Critical |
| 9 | AI business operators. | Submit periodic reports to authorities as required. “Monitoring relied on periodic reporting obligations by AI business operators” | As specified by regulations | — | Critical |
Related Regulations
South Korea - AI Development and Trust (2021)
South Korea94% similar
South Korea - AI Regulation Bill (RAI-KR-NA-ALGARIN-2021)
South Korea92% similar
South Korea - AI Responsibility Bill
South Korea92% similar
South Korea AI Trust Framework Act
South Korea92% similar
South Korea - AI Development Framework
South Korea91% similar
More AI regulation in South Korea
AI regulation in South Korea: full overview
- South Korea - AI Responsibility Act
- South Korea - AI Privacy Risk Management
- South Korea - AI Technology Framework (RAI-KR-NA-BATRMXX-2020)
- South Korea - Digital Bill of Rights
- South Korea - Intelligent Robot Promotion Act (2008)
- South Korea - Digital Transformation Strategy
- South Korea - Generative AI Ethics Guidebook
- South Korea - User Protection for Generative AI Services
© Regulations.AI · updated on 20 Sep 2026