Your AI video leaves the app. The team checked the picture, the sound and the download button. Did anyone check what disclosure should accompany the file?
That is a workflow question for providers of AI products and services. It is not a claim that every video made with an AI tool falls under South Korea's AI Basic Act, or that a missed review proves a legal breach.
The law is in force; grace is a different question
The AI Basic Act took effect on 22 January 2026. Article 31 sets transparency duties. The current Act consolidation is effective 21 July 2026; the current Enforcement Decree consolidation is effective 20 August 2026. We checked the Korean text against the earlier July decree: Article 23's transparency wording is unchanged. The later consolidation does not create a new export-approval rule.
MSIT announced at least one year of guidance-oriented grace for fact-finding investigations and administrative fines. Its announcement reserves investigations for extremely exceptional cases involving serious social harm, including loss of life or infringement of human rights. This is an enforcement announcement, not a postponed commencement, blanket immunity or a guaranteed expiry date. We do not claim a later extension or report current enforcement practice beyond that announcement.
Who needs to check?
The Act distinguishes AI business operators from users. Operators include those developing and providing AI, and those using supplied AI to provide AI products or services. An ordinary creative business using an AI tool is not automatically an AI-service provider. MSIT's transparency guidance release makes that distinction too.
Article 4 applies to conduct abroad when it affects Korean markets or users. A country flag in a software rule does not establish that legal scope. Assess the actual service, role and affected users.
Three duties, not one universal watermark
Article 31 separates:
- Advance notice that a product or service uses high-impact or generative AI.
- An indication that generated output was made with generative AI.
- Clearly recognisable notice or marking when synthetic sound, images or video are difficult to distinguish from reality. Artistic or creative expression can use a manner that does not disrupt its exhibition or enjoyment; that is not automatic permission to omit disclosure.
Current Decree Article 23 permits human-recognisable marking for the ordinary generated-output duty, or machine-readable marking with at least one text, voice or similar notice. Invisible metadata alone is not the second route. The distinct clear-recognition duty for realistic synthetic outputs still matters.
Where AI use is obvious, or the use is solely internal, the decree can exempt all or some of the relevant duties. These are conditional exceptions, not a blanket exemption for every synthetic file. Methods also account for the users' age and physical and social circumstances.
MSIT's guidance release discusses outputs within a service environment and outputs downloaded or shared outside it. Here, export means leaving the service environment, not necessarily crossing a national border. The guidance's examples explain implementation; the binding duties come from the Act and decree.
Hypothetical: the file leaves before anyone checks
Assume an AI-product/service provider affects Korean users. Its generative video service lets a customer download a synthetic clip before the team checks the applicable disclosure requirements.
The missing check is an operational risk. It does not prove disclosure was absent, that the video was difficult to distinguish from reality, that an exception did not apply, or that Korean law was breached. A team's configured review step is also not a statutory approval procedure.
The practical task is to establish what needs to accompany the output and who handles an unresolved review before connecting automation to an exporter.
Actual isolated HaltState test
Separately from that hypothetical, we evaluated content.export using the real policy engine from an immutable source archive. The authored policy matched region KR, disclosure_review_required true, proposed_outcome export, and an allowed content-operator role. The engine returned APPROVAL_REQUIRED.
The test recorded the policy version, created an unsigned hash-only Proof Pack and recomputed its content digest. It used in-memory policy and Redis fixtures, with network and subprocess audit guards and a credential-free environment. Production storage and signing were not exercised.
The region and review flag were supplied by the test author. HaltState did not infer a legal obligation, classify the provider or decide whether a label was sufficient. No video was exported, no connected export was blocked and no human approval was completed. A verified content digest is not a signature, government endorsement or compliance certification.
Before connecting the next exporter
Determine the provider's role and territorial scope. Check the output type, notice method and applicable exceptions against current official text. Identify who owns review, how unresolved cases are held, and how disclosure survives downloads and sharing. Then test that specific workflow with the actual exporter before it affects customers.
Read the isolated test and its limits alongside the primary sources. A configured approval decision is useful only if you understand what it did, and what still has to happen.
Sources: AI Basic Act Articles 2, 4, 31 and commencement provisions; current Enforcement Decree Article 23; MSIT Korean commencement announcement (21 January 2026, for 22 January publication); MSIT English commencement and transparency-guidance releases (22 January 2026). Exact primary URLs, archived text, hashes and Korean-to-English quotes are retained in the source receipts and translation review for this episode. Machine translation and local-context review, not native-speaker or lawyer certification.
General information, not legal advice. Hypothetical and actual isolated test are separate. AI-generated narration and illustrative footage do not depict a real customer incident.
Primary-source links
- AI Basic Act, current Korean text: Articles 2, 4 and 31
- Enforcement Decree, current Korean text: Article 23
- MSIT Korean commencement and grace announcement, including HWPX attachment
- MSIT English commencement announcement
- MSIT transparency-guidance release
Inspect the isolated test record and limitations.
Actual isolated test record
Authored in-memory policy evaluation. Unsigned hash-only evidence, not certification.
- Action
content.export- Authored policy
kr_disclosure_review_demo_v1 - Decision
APPROVAL_REQUIRED - Policy version
105db59c8c9c2013ce54287a7e102200 e5395423ff0fca3b babc30d507f77acc - Frozen source
d6d6ebbff18d15e416125b0bed468551 dc0b16a1 - Content digest
9118ca296df4c2fc734c49786b957542 636027e8bcef021d e58e9cc2fabee981
No video was exported. No connected export was blocked. No person completed an approval. No production connectors, persistent storage or signing were exercised.