South Korea · No Investigator Licence, and a Translation That Stops in 2017

Asia-Pacific Private Investigation Registry · AI9OS

Last verified: 6 September 2026 · This is the thinnest entry on this registry and it is marked as such on purpose. The governing instrument is the Credit Information Use and Protection Act (신용정보의 이용 및 보호에 관한 법률). The English translation obtainable from the Korea Legislation Research Institute reflects Act No. 15146 of 28 November 2017, which predates the amendment that changed the position. The Korean National Law Information Center did not render for automated retrieval; on 13 October 2026 Article 40 was read there in a browser, in its 2017, 2020 and current versions (see below). Nothing on this page should be relied on for a live matter without Korean counsel.

South Korea means the Republic of Korea. The Democratic People's Republic of Korea is a separate state, has no comparable regime, and is not covered by this registry.

Field	South Korea
What the state regulates	Neither, on the evidence available. No licence for the investigation profession and none for the activity. The constraints are data-protection constraints and a set of prohibitions aimed at credit information companies.
Is there a private investigator licence?	No state licensing or registration regime was found. Reporting is consistent that the 2020 change removed a prohibition without creating a permission. Firms are described as registering with the tax authorities under an ordinary business category rather than with a regulator.
What changed in 2020	Act No. 16957 of 4 February 2020, in force 5 August 2020, removed the clause in Article 40 that barred anyone who is not a credit information company from using the title 탐정 (detective) and from finding a person’s whereabouts as a business. Credit information companies themselves are still barred from both (Article 40(1), items 4 and 5). Verified. Read in the official Korean text on the National Law Information Center (law.go.kr) on 13 October 2026: Act No. 15146 (2017) and Act No. 16957 (2020).
Governing instrument	Credit Information Use and Protection Act, and the Personal Information Protection Act (PIPA) for the handling of personal data.
Regulator	No investigation regulator. The Personal Information Protection Commission supervises PIPA; the Financial Services Commission supervises credit information.
Reported limits on scope	Locating missing persons and runaway minors is reported as permitted. Collecting evidence for criminal or civil proceedings, working on matters under investigation or trial, and obtaining non-public information are reported as outside what may lawfully be done. Reported, not verified.
Foreign and cross-border firms	Unverified, requires local advice. Not addressed by anything read for this entry.

The finding that is actually solid, and it is about the sources

The most reliable thing established for this entry is a limit on the evidence rather than a proposition of law, and it is worth stating plainly because it would mislead anyone who did not check.

The Korea Legislation Research Institute publishes an English translation of the Credit Information Use and Protection Act. It reads cleanly, it is an official translation, and its Article 40 contains exactly the prohibitions a researcher would expect to find:

Finding out a certain person's whereabouts and contacts, or investigating his or her private life, other than commercial transaction relationships

Using titles, including "intelligence service agent", "detective", or other titles similar thereto

That text reflects the Act as amended by Act No. 15146 of 28 November 2017. It therefore sits on the wrong side of the change that is the entire point of the South Korean entry. A page built on it would state, with citations and an official source, that the title "detective" is prohibited in South Korea, which has been wrong since August 2020.

This is a general hazard, not a Korean one. An official English translation of a foreign statute is a snapshot, and translations are updated on a slower cycle than the law. A readable, well-formatted, government-published document tells you nothing about whether it is current. Read the version line before the provision. The same discipline is why every entry on this registry carries a verification date rather than a publication date.

What can be said, and how firmly

Proposition	Confidence	Why
There is no state licensing or registration regime for private investigators	Reasonably firm	Consistent across independent reporting, and no regulator, register or licence class was located
The clause barring anyone outside the credit-information sector from the title 탐정, and from locating people as a business, was removed with effect from 5 August 2020	Verified	Read in the official Korean text on the National Law Information Center (law.go.kr) on 13 October 2026: Act No. 15146 (2017) and Act No. 16957 (2020). The 2017 text bars non-credit-information companies; the 2020 and current texts do not
The current text of Article 40 and to whom it applies	Verified	Current text (in force 11 September 2026, Act No. 21445) read: it binds only 신용정보회사등, defined in Article 15(1). Whether any other law restricts anyone else was not established
The permitted and prohibited scope of investigative work	Reported, not verified	Descriptions are consistent but originate from commentary rather than from the instrument
PIPA governs the handling of personal data collected in an investigation	Firm as a general proposition	PIPA is of general application; its specific provisions were not read for this entry

Why the absence of a licence is not the good news it appears to be

South Korea is the clearest case on this registry of a jurisdiction where "no licence required" is a misleading summary. PIPA is among the more demanding data-protection regimes anywhere, and the activities that make investigative work commercially useful, which is locating a person and establishing their conduct, are precisely the activities that data-protection law is designed to restrain.

The pattern is the same one recorded for Hong Kong and Laos: the state has not built a permission system, so the constraint sits in a general statute rather than in a licence, and it is enforced after the fact rather than at the gate. A practitioner who checks only for a licensing regime will read all three as permissive and be wrong in all three.

Open questions on this entry

1. The current text of Credit Information Use and Protection Act Article 40: answered 13 October 2026. The official Korean text was read on law.go.kr, which renders in a browser though not for automated retrieval. The 2017 version (Act No. 15146) said credit information companies must not do the listed acts, and that anyone who is not one must not locate people as a business or use the title 탐정. Act No. 16957 (in force 5 August 2020) deleted that second part. The current version (in force 11 September 2026) still bars 신용정보회사등 (credit information companies, personal credit information management companies, debt-collection companies, credit information concentration agencies, and providers and users of credit information, Article 15(1)) from finding a person’s whereabouts and contact details (item 4) and from using the name 정보원, 탐정 or a similar name (item 5). AI9OS working translation. Still open: whether any other statute restricts investigators, which is a question for Korean counsel.

2. Whether a licensing regime has since been enacted. A licensed-detective system has been proposed repeatedly. Whether any such Act is now in force was not established. An entry that says "no licence" is exactly the kind of statement that goes stale silently, which is why this page is on a 180-day review cycle rather than the usual 365.

3. PIPA's specific provisions were not read. This entry treats PIPA as the constraint without citing the provisions that do the constraining. That is enough to warn a practitioner and not enough to plan around.

How this compares

Jurisdiction	What the state regulates	The short answer
Singapore	Profession	Licensed, source-agnostic definition, two licences
Malaysia	Profession	Licensed under the Private Agencies Act 1971
Philippines	Profession	Licensed under RA 11917
Japan	Profession	Notification, not licence, and internet-only work is excluded
Thailand	Neither	Guarding is licensed; investigation is not mentioned
Indonesia	Neither	Six licensed security categories; investigation is not one
Hong Kong	Neither	Guarding is licensed; the disclosure offence is the constraint
South Korea	Neither	No licence since the title was freed in 2020; the data law constrains
Laos	Neither	Guarding is licensed; the data law is the constraint
Vietnam	Activity	Data analysis and processing become conditional business lines

Primary sources

Credit Information Use and Protection Act (신용정보의 이용 및 보호에 관한 법률): current Korean text, National Law Information Center (in force 11 September 2026, Act No. 21445). The English translation reflecting Act No. 15146 of 28 November 2017 (Korea Legislation Research Institute) is out of date for this question.
Personal Information Protection Act (개인정보 보호법): current Korean text, National Law Information Center; not read provision by provision for this entry

Other jurisdictions

General information for practitioners, not legal advice. This entry is materially less verified than the others on this registry and says so. Engage Korean counsel before relying on any of it for a live matter.

AI9OS turns public information into verified, chain-of-custody findings for licensed investigation agencies, law firms and corporate risk teams.

Request a demo