South Korea · No Investigator Licence, and a Translation That Stops in 2017

Asia-Pacific Private Investigation Registry · AI9OS

Last verified: 6 September 2026 · This is the thinnest entry on this registry and it is marked as such on purpose. The governing instrument is the Credit Information Use and Protection Act (신용정보의 이용 및 보호에 관한 법률). The English translation obtainable from the Korea Legislation Research Institute reflects Act No. 15146 of 28 November 2017, which predates the amendment that changed the position. The Korean National Law Information Center did not render for automated retrieval. Nothing on this page should be relied on for a live matter without Korean counsel.

South Korea means the Republic of Korea. The Democratic People's Republic of Korea is a separate state, has no comparable regime, and is not covered by this registry.

FieldSouth Korea
What the state regulatesNeither, on the evidence available. No licence for the investigation profession and none for the activity. The constraints are data-protection constraints and a set of prohibitions aimed at credit information companies.
Is there a private investigator licence?No state licensing or registration regime was found. Reporting is consistent that the 2020 change removed a prohibition without creating a permission. Firms are described as registering with the tax authorities under an ordinary business category rather than with a regulator.
What changed in 2020An amendment to the Credit Information Use and Protection Act, effective 4 August 2020, removed the prohibition on using the title 탐정 (detective). This is reported consistently but was not read in the current statutory text.
Governing instrumentCredit Information Use and Protection Act, and the Personal Information Protection Act (PIPA) for the handling of personal data.
RegulatorNo investigation regulator. The Personal Information Protection Commission supervises PIPA; the Financial Services Commission supervises credit information.
Reported limits on scopeLocating missing persons and runaway minors is reported as permitted. Collecting evidence for criminal or civil proceedings, working on matters under investigation or trial, and obtaining non-public information are reported as outside what may lawfully be done. Reported, not verified.
Foreign and cross-border firmsUnverified, requires local advice. Not addressed by anything read for this entry.

The finding that is actually solid, and it is about the sources

The most reliable thing established for this entry is a limit on the evidence rather than a proposition of law, and it is worth stating plainly because it would mislead anyone who did not check.

The Korea Legislation Research Institute publishes an English translation of the Credit Information Use and Protection Act. It reads cleanly, it is an official translation, and its Article 40 contains exactly the prohibitions a researcher would expect to find:

Finding out a certain person's whereabouts and contacts, or investigating his or her private life, other than commercial transaction relationships

Using titles, including "intelligence service agent", "detective", or other titles similar thereto

That text reflects the Act as amended by Act No. 15146 of 28 November 2017. It therefore sits on the wrong side of the change that is the entire point of the South Korean entry. A page built on it would state, with citations and an official source, that the title "detective" is prohibited in South Korea, which has been wrong since August 2020.

This is a general hazard, not a Korean one. An official English translation of a foreign statute is a snapshot, and translations are updated on a slower cycle than the law. A readable, well-formatted, government-published document tells you nothing about whether it is current. Read the version line before the provision. The same discipline is why every entry on this registry carries a verification date rather than a publication date.

What can be said, and how firmly

PropositionConfidenceWhy
There is no state licensing or registration regime for private investigatorsReasonably firmConsistent across independent reporting, and no regulator, register or licence class was located
The prohibition on using the title 탐정 was removed with effect from 4 August 2020Reported, not verifiedConsistent reporting; the amended provision itself was not read
The current text of Article 40 and to whom it appliesUnverifiedThe only translation obtained predates the amendment. Note that Article 40 in the 2017 text binds credit information companies, which is a narrower class than everyone
The permitted and prohibited scope of investigative workReported, not verifiedDescriptions are consistent but originate from commentary rather than from the instrument
PIPA governs the handling of personal data collected in an investigationFirm as a general propositionPIPA is of general application; its specific provisions were not read for this entry

Why the absence of a licence is not the good news it appears to be

South Korea is the clearest case on this registry of a jurisdiction where "no licence required" is a misleading summary. PIPA is among the more demanding data-protection regimes anywhere, and the activities that make investigative work commercially useful, which is locating a person and establishing their conduct, are precisely the activities that data-protection law is designed to restrain.

The pattern is the same one recorded for Hong Kong and Laos: the state has not built a permission system, so the constraint sits in a general statute rather than in a licence, and it is enforced after the fact rather than at the gate. A practitioner who checks only for a licensing regime will read all three as permissive and be wrong in all three.

Open questions on this entry

1. The current text of Credit Information Use and Protection Act Article 40. Not read. The available English translation predates the 2020 amendment, and the Korean National Law Information Center did not render for automated retrieval. This is the single question that would most improve this entry, and it needs either a working retrieval of the current Korean text or Korean counsel.
2. Whether a licensing regime has since been enacted. A licensed-detective system has been proposed repeatedly. Whether any such Act is now in force was not established. An entry that says "no licence" is exactly the kind of statement that goes stale silently, which is why this page is on a 180-day review cycle rather than the usual 365.
3. PIPA's specific provisions were not read. This entry treats PIPA as the constraint without citing the provisions that do the constraining. That is enough to warn a practitioner and not enough to plan around.

How this compares

JurisdictionWhat the state regulatesThe short answer
SingaporeProfessionLicensed, source-agnostic definition, two licences
MalaysiaProfessionLicensed under the Private Agencies Act 1971
PhilippinesProfessionLicensed under RA 11917
JapanProfessionNotification, not licence, and internet-only work is excluded
ThailandNeitherGuarding is licensed; investigation is not mentioned
IndonesiaNeitherSix licensed security categories; investigation is not one
Hong KongNeitherGuarding is licensed; the disclosure offence is the constraint
South KoreaNeitherNo licence since the title was freed in 2020; the data law constrains
LaosNeitherGuarding is licensed; the data law is the constraint
VietnamActivityData analysis and processing become conditional business lines

Primary sources

  • Credit Information Use and Protection Act (신용정보의 이용 및 보호에 관한 법률), English translation reflecting Act No. 15146 of 28 November 2017, Korea Legislation Research Institute. Out of date for this question.
  • Personal Information Protection Act (개인정보 보호법), not read provision by provision for this entry

Other jurisdictions

General information for practitioners, not legal advice. This entry is materially less verified than the others on this registry and says so. Engage Korean counsel before relying on any of it for a live matter.

AI9OS turns public information into verified, chain-of-custody findings for licensed investigation agencies, law firms and corporate risk teams.

Request a demo