{"slug":"south-korea-ai-basic-act-art-34-high-impact-ai-risk-management-plan","id":"AIPT-OBL-0063","permanent_url":"https://aipolicytracker.org/id/AIPT-OBL-0063","title":"Operators of high-impact AI must establish and operate a risk management plan","short_title":"High-impact AI risk management plan","category":"risk_management","summary":"An AI business operator that provides high-impact AI, or a product or service using it, must establish and operate a plan for managing the risks of that AI. High-impact AI is AI used in areas such as energy, drinking water, health care and medical devices, nuclear safety, biometric analysis for criminal investigation, decisions on recruitment or loans, transport, public services and education, where it may materially affect life, safety or fundamental rights.\n","practical_action":"Classify systems against the high-impact areas and write a risk management plan for each one before launch.\n","is_binding":true,"applies_from":"2026-01-22","section":null,"source_reference":"Article 34(1)","official_source_url":"https://www.law.go.kr/lsInfoP.do?lsiSeq=268543","review_status":"verified","confidence_level":"medium","last_verified_at":"2026-09-26","reviewed_by":"Bhaskar Bhatt","actors":["provider","deployer","public_authority"],"sectors":["cross_sector","employment","financial_services","healthcare","education","public_services","critical_infrastructure"],"use_cases":["hiring_and_hr","biometrics","health","finance_and_credit","education","public_services","safety_critical"],"applicability":[{"description":"AI business operators providing high-impact AI or products and services based on it; operators may ask the ministry to confirm whether a system is high-impact under Article 33.","actors":["provider","deployer","public_authority"],"conditions":null}],"evidence_examples":[{"title":"High-impact AI risk management plan","description":null,"artifact_type":"document"},{"title":"High-impact classification record","description":null,"artifact_type":"record"}],"framework_mappings":[{"framework":"iso_42001","framework_name":"ISO/IEC 42001:2023","reference":"Clause 6.1.2, 6.1.3, 8.1","note":"Risk assessment, treatment and operational planning.","confidence_level":"medium","is_original":true},{"framework":"nist_ai_rmf","framework_name":"NIST AI RMF 1.0","reference":"MAP 1.5, MANAGE 1.3","note":"Risk tolerance and treatment.","confidence_level":"medium","is_original":true}],"controls":[{"slug":"ai-risk-assessment","title":"AI risk assessment and lifecycle risk register","kind":"process","relationship":"satisfies","note":"Per-system risk plan with identified risks and treatments.","confidence_level":"high","url":"https://aipolicytracker.org/controls/ai-risk-assessment"},{"slug":"ai-system-inventory","title":"AI system inventory and classification","kind":"process","relationship":"supports","note":"Classification of systems against the high-impact list.","confidence_level":"high","url":"https://aipolicytracker.org/controls/ai-system-inventory"}],"url":"https://aipolicytracker.org/obligations/south-korea-ai-basic-act-art-34-high-impact-ai-risk-management-plan","policy":{"slug":"south-korea-framework-act-on-the-development-of-artificial-intelligence-and-establishment-of-a-foundation-for","title":"Framework Act on the Development of Artificial Intelligence and Establishment of a Foundation for Trust (AI Basic Act, Act No. 20676)","status":"in_force","jurisdiction":"south-korea","url":"https://aipolicytracker.org/policies/south-korea-framework-act-on-the-development-of-artificial-intelligence-and-establishment-of-a-foundation-for"}}