{"slug":"south-korea-ai-basic-act-art-34-high-impact-ai-user-protection-and-documentation","id":"AIPT-OBL-0066","permanent_url":"https://aipolicytracker.org/id/AIPT-OBL-0066","title":"Operators of high-impact AI must prepare user-protection measures and keep records of their safety and trust measures","short_title":"User protection and records","category":"governance_accountability","summary":"Operators of high-impact AI must prepare and implement a plan to protect users, and must prepare and keep documents describing the measures they take to secure the AI's safety and reliability, so that they can be shown to the Ministry of Science and ICT on request. Further items may be added by Presidential Decree, and the ministry may publish guidelines on how to meet these duties.\n","practical_action":"Write a user-protection plan for each high-impact system and keep a dated file of the safety and trust measures applied to it.\n","is_binding":true,"applies_from":"2026-01-22","section":null,"source_reference":"Article 34(1)","official_source_url":"https://www.law.go.kr/lsInfoP.do?lsiSeq=268543","review_status":"verified","confidence_level":"medium","last_verified_at":"2026-09-26","reviewed_by":"Bhaskar Bhatt","actors":["provider","deployer","public_authority"],"sectors":["cross_sector","employment","financial_services","healthcare","education","public_services"],"use_cases":["hiring_and_hr","health","finance_and_credit","education","public_services"],"applicability":[{"description":"AI business operators providing high-impact AI or products and services based on it.","actors":["provider","deployer","public_authority"],"conditions":null}],"evidence_examples":[{"title":"User protection plan","description":null,"artifact_type":"document"},{"title":"Safety and reliability measures file","description":null,"artifact_type":"record"}],"framework_mappings":[{"framework":"iso_42001","framework_name":"ISO/IEC 42001:2023","reference":"Clause 7.5; Annex A.6.2.7, A.9.3","note":"Documented information, technical documentation and objectives for responsible use.","confidence_level":"medium","is_original":true},{"framework":"nist_ai_rmf","framework_name":"NIST AI RMF 1.0","reference":"GOVERN 1.4, MANAGE 4.1","note":"Documentation and post-deployment user protection.","confidence_level":"medium","is_original":true}],"controls":[{"slug":"technical-documentation-and-model-cards","title":"Technical documentation, model cards and instructions for use","kind":"process","relationship":"satisfies","note":"Documentation of safety and reliability measures.","confidence_level":"medium","url":"https://aipolicytracker.org/controls/technical-documentation-and-model-cards"},{"slug":"ai-governance-policy-and-accountability","title":"AI governance policy and accountability structure","kind":"policy","relationship":"supports","note":"User-protection plan and ownership.","confidence_level":"medium","url":"https://aipolicytracker.org/controls/ai-governance-policy-and-accountability"}],"url":"https://aipolicytracker.org/obligations/south-korea-ai-basic-act-art-34-high-impact-ai-user-protection-and-documentation","policy":{"slug":"south-korea-framework-act-on-the-development-of-artificial-intelligence-and-establishment-of-a-foundation-for","title":"Framework Act on the Development of Artificial Intelligence and Establishment of a Foundation for Trust (AI Basic Act, Act No. 20676)","status":"in_force","jurisdiction":"south-korea","url":"https://aipolicytracker.org/policies/south-korea-framework-act-on-the-development-of-artificial-intelligence-and-establishment-of-a-foundation-for"}}