📋 Korean Law Insight | Business Law / Data Privacy
By Attorney NOH UJIN | HANBYOL LAW LLC, Seoul
Korean Fintech and Digital Payment Regulation for Foreign Companies: A 2026 Complete Legal Guide
South Korea ranks among the world's most advanced digital payment ecosystems. With over 95% smartphone penetration and a consumer base eager to adopt mobile wallets, QR payments, buy-now-pay-later (BNPL), and open banking services, the market is enormously attractive for foreign fintech companies. However, entry requires navigating a complex regulatory framework centred on the Electronic Financial Transactions Act (EFTA, 전자금융거래법), the Personal Information Protection Act (PIPA, 개인정보보호법), the Credit Information Use and Protection Act (CIPA, 신용정보법), and a growing body of secondary regulations issued by the Financial Services Commission (FSC, 금융위원회) and the Financial Supervisory Service (FSS, 금융감독원).
This guide provides foreign businesses — whether pure-play fintechs, global payment processors, or overseas banks seeking a digital footprint in Korea — with a practical overview of licensing requirements, data obligations, and current regulatory trends as of 2026.
1. The Regulatory Landscape: Key Statutes and Regulators
1.1 Electronic Financial Transactions Act (EFTA)
The EFTA (전자금융거래법) is the primary statute governing digital payments in Korea. Originally enacted in 2006 and substantially amended in 2021 (effective 2022–2024 in phases), it defines and licenses the following categories of electronic financial business operators:
- Electronic Financial Business Operators (전자금융업자): entities engaged in electronic money issuance, electronic fund transfer, electronic payment settlement, small-sum lending, and related services.
- Electronic Payment Intermediary Operators (전자지급결제대행업, PG): payment gateway companies that facilitate transactions between merchants and financial institutions.
- Pre-paid Electronic Payment Means Issuers (선불전자지급수단발행·관리업): issuers of stored-value instruments such as gift cards, app-based wallets, and reward points above certain thresholds.
- Electronic Currency Issuers (전자화폐발행·관리업): issuers of multi-purpose digital currency accepted by multiple unaffiliated merchants.
The 2021 amendments introduced the concept of "MyData" (본인신용정보관리업) under CIPA, creating a personal credit information aggregation and portability framework that has since become a cornerstone of Korea's open banking ecosystem.
1.2 MyData Framework (본인신용정보관리업)
Korea's MyData regime, formally launched in January 2022, grants consumers the right to consolidate their financial data from banks, insurers, card companies, and non-financial data holders (telecom, e-commerce) into a single dashboard managed by a licensed MyData Business Operator (마이데이터 사업자). Foreign companies seeking to aggregate Korean consumer financial data — whether to power robo-advisory, credit scoring, or personalised offers — must obtain a MyData licence from the FSC. As of 2026, more than 80 entities hold MyData licences, including major banks, card issuers, telecom operators, and fintech startups.
1.3 Network of Secondary Regulators
In addition to the FSC and FSS, foreign fintechs must engage with:
- Bank of Korea (한국은행): oversight of payment systems stability; large-value interbank settlement via BOK-Wire+.
- Korea Internet & Security Agency (KISA, 한국인터넷진흥원): ISMS (Information Security Management System) certification required for electronic financial business operators.
- Korea Financial Intelligence Unit (KoFIU, 금융정보분석원): AML/CFT reporting obligations applicable to electronic financial business operators handling cash or crypto.
2. Licensing Requirements for Foreign Fintech Companies
2.1 Registration vs. Licensing
Under the revised EFTA, electronic financial business operators are divided into two groups by capital and scope:
- Licensed operators (허가): electronic money issuers (minimum capital KRW 5 billion), electronic currency issuers (KRW 5 billion).
- Registered operators (등록): PG companies, stored-value issuers, electronic fund transfer agents — typically KRW 1–3 billion minimum capital.
Foreign companies wishing to operate directly must either establish a Korean subsidiary (법인) or a branch (지점). A branch may suffice for some registration-based activities, but most FSC licences require a locally incorporated entity with a physical office, Korean resident officers, and adequate IT infrastructure located in Korea.
2.2 ISMS Certification
Any electronic financial business operator with annual revenue exceeding KRW 10 billion, daily active users exceeding 1 million, or handling personal credit information above a defined threshold must obtain and maintain ISMS-P (정보보호 및 개인정보보호 관리체계) certification from KISA. Initial certification typically takes 6–12 months and requires demonstrated compliance with 102 mandatory controls covering technical, operational, and administrative dimensions of information security.
2.3 AML/CFT Registration with KoFIU
Electronic financial business operators subject to the Act on Reporting and Using Specified Financial Transaction Information (특정금융정보법) must register with KoFIU and implement customer due diligence (CDD), enhanced due diligence (EDD) for high-risk customers, suspicious transaction reporting (STR), and currency transaction reporting (CTR) for cash transactions above KRW 10 million. Failure to comply carries criminal penalties of up to five years' imprisonment or a fine of up to KRW 50 million.
3. Open Banking and the Financial Data Exchange Network
Korea's Open Banking Service (오픈뱅킹서비스), operated by the Korea Financial Telecommunications & Clearings Institute (KFTC, 금융결제원), grants licensed fintechs and banks standardised API access to consumer account information (balance, transaction history) and payment initiation capabilities. As of 2026:
- Over 200 fintech firms are registered participants in the open banking network.
- The system processes more than 15 million API calls per day.
- Fees charged to fintechs for API access are regulated and capped, reducing barriers to entry for smaller operators.
Foreign companies can participate in open banking by establishing a Korean legal entity and registering with both the FSC (under EFTA) and KFTC. The API standards follow a modified version of the UK Open Banking / Berlin Group NextGenPSD2 framework, making the technical integration manageable for operators already compliant with PSD2 in Europe.
4. Data Protection Obligations Under PIPA and CIPA
Fintech operations are data-intensive, and Korean data protection law imposes significant obligations on any entity processing personal or personal credit information of Korean residents.
4.1 PIPA Obligations
- Consent-based collection: explicit, informed, and purpose-specific consent required for collection of personal information.
- Data minimisation: only information necessary for the stated purpose may be collected.
- Data localisation: personal information of Korean residents may not be transferred overseas without either the data subject's consent or an adequacy determination/standard contractual clauses — standards substantially similar to GDPR Chapter V mechanisms.
- Breach notification: breaches affecting more than 1,000 individuals must be reported to the PIPC within 72 hours and notified to affected individuals without delay.
4.2 Credit Information Act (CIPA) Obligations
The CIPA applies to any entity that collects, processes, or provides personal credit information, including transaction records, repayment history, and behavioural scoring data. Credit information companies (신용정보업자) require a separate licence from the FSC. Foreign fintechs using alternative data for credit decisioning must ensure their models and data sources comply with the CIPA's restrictions on automated decision-making and the right to explanation.
5. Cross-Border Payment Services and FETA Compliance
Foreign exchange activities in Korea are governed by the Foreign Exchange Transactions Act (FETA, 외국환거래법). Fintech companies offering cross-border remittance, foreign currency wallets, or multicurrency payments must register as a Small-Amount Overseas Remittance Business (소액해외송금업) with the FSC (for amounts up to USD 50,000 per transaction and USD 1 million per customer per year) or as a full foreign exchange broker (외국환중개업자). The small-amount remittance licence, introduced to support fintech disruption of bank-dominated remittance channels, requires minimum capital of KRW 2 billion and ISMS-P certification.
6. Regulatory Sandbox and Fintech Support Initiatives
Korea's Financial Regulatory Sandbox (혁신금융서비스 지정제도), established under the Special Act on Support for Fintech Industry (핀테크 산업 지원에 관한 특별법), allows innovative financial services that do not fit existing licensing categories to operate for up to four years under a designated sandbox status while the regulatory framework is developed. Since launch in 2019, over 200 services have been approved. Foreign companies can apply directly or through a Korean partner entity.
Additional government support mechanisms include:
- Invest KOREA's Fintech Desk: dedicated advisory for foreign fintech entrants.
- Korea Fintech Week: annual event facilitating introductions between foreign operators and Korean regulators, investors, and banks.
- FSC's "Fintech Innovation Hub": provides pre-licensing consultations, regulatory Q&A, and facilitated pilot testing with incumbent banks.
7. Liability, Incident Response, and Consumer Redress
Under the EFTA, electronic financial business operators bear strict liability for damages arising from unauthorised transactions due to forgery, alteration, or electronic accidents. This represents a significant shift from the traditional fraud liability framework applicable to banks, and foreign operators must ensure their indemnification policies and insurance arrangements are structured accordingly. The EFTA provides limited defences where fraud is attributable solely to the gross negligence of the user, but regulators have interpreted this exception narrowly.
8. Penalties and Enforcement
- Operating without a licence/registration: up to three years' imprisonment or fine of up to KRW 20 million.
- ISMS non-compliance: administrative fine of up to KRW 50 million per violation.
- PIPA breach: up to KRW 30 million fine per violation; aggregate penalties can exceed KRW 3 billion for large-scale breaches.
- CIPA violation (unlicensed credit information business): up to five years or fine up to KRW 50 million.
📌 Official References
Frequently Asked Questions (FAQ)
Q1: Can a foreign fintech company operate in Korea without establishing a local entity?
No. The EFTA requires that electronic financial business operators be either a Korean corporation or a Korean branch of a foreign company. For most licensing categories, a locally incorporated subsidiary is practically necessary because the FSC requires resident officers, a physical office, and domestic IT infrastructure. A purely cross-border model — operating from outside Korea — is not permissible for regulated payment activities targeting Korean consumers.
Q2: How long does the FSC licensing process take?
For registration-level services (e.g., PG, stored-value), the review period is typically 2–3 months after submission of a complete application. For licence-level activities (e.g., electronic money issuance), the process takes 4–6 months. ISMS-P certification, which must be obtained concurrently or prior to operation, adds 6–12 months to the overall timeline. Foreign companies should budget 12–18 months from initial planning to go-live for a full electronic financial business setup.
Q3: What is the minimum capital requirement for a foreign fintech entering Korea?
It varies by activity: PG/stored-value registration requires KRW 1–3 billion (approx. USD 750,000–USD 2.3 million); electronic money issuance requires KRW 5 billion (approx. USD 3.8 million); small-amount overseas remittance requires KRW 2 billion (approx. USD 1.5 million). Capital must be maintained on an ongoing basis, and the FSC monitors capital adequacy through regular reporting.
Q4: Does Korea's open banking system allow foreign fintechs to access consumer bank account data?
Yes, but only through a registered Korean legal entity with a valid EFTA registration and KFTC open banking participation agreement. The system provides standardised API access to account balance, transaction history (up to 12 months), and payment initiation. Data is provided with the account holder's explicit consent via the bank's authentication interface.
Q5: How does Korea's MyData regime differ from GDPR data portability rights?
Both systems grant individuals the right to access and transfer their data, but Korea's MyData goes further by creating a commercial framework for licensed intermediaries (MyData operators) to actively aggregate and analyse data on the consumer's behalf. GDPR Article 20 portability is a passive right; Korea's MyData is an active, monetisable service ecosystem with dedicated licensing, regulated fees, and standardised API infrastructure spanning financial, telecom, and e-commerce data.
Q6: What AML/CFT documentation does a foreign fintech need to implement in Korea?
A Korean AML/CFT compliance programme must include: (1) a written AML Policy approved by the board, (2) a designated Compliance Officer (AML담당자) registered with KoFIU, (3) a risk-based CDD/EDD framework, (4) automated transaction monitoring for STR generation, (5) CTR filing for cash transactions over KRW 10 million, (6) annual AML training for all relevant staff, and (7) KoFIU reporting system integration. Foreign groups may leverage existing global AML frameworks but must localise them to Korean requirements.
Q7: Is it possible to test a fintech product in Korea before obtaining full regulatory approval?
Yes. Korea's Financial Regulatory Sandbox (designated innovative financial services) allows companies to launch pilot services for up to four years while a permanent regulatory framework is being developed. Applications must demonstrate innovation, consumer benefit, and manageable risk. The sandbox does not exempt operators from basic PIPA data protection or AML obligations, but waives certain EFTA licensing requirements during the pilot period.
📚 Related Articles
Need Legal Assistance?
HANBYOL LAW LLC provides expert Korean legal counsel for international fintech and financial services companies.
📧
ujin95@hanbl.co.kr | 🌐
www.hanbl.co.kr
Initial consultations are complimentary.
📋 Korean Law Insight | 商业法 / 数据隐私
作者：NOH UJIN 律师 | HANBYOL LAW LLC，首尔
外资企业在韩国的金融科技与数字支付监管合规指南（2026年）
韩国是全球数字支付市场最发达的国家之一，智能手机普及率超过95%，移动钱包、二维码支付、先买后付（BNPL）和开放银行服务渗透率极高。对于希望进入韩国市场的外资金融科技企业而言，必须深入了解以下核心法规：《电子金融交易法》（EFTA，전자금융거래법）、《个人信息保护法》（PIPA，개인정보보호법）、《信用信息使用及保护法》（CIPA，신용정보법），以及金融委员会（FSC）和金融监督院（FSS）发布的一系列次级法规。
1. 主要监管机构与适用法规
韩国金融科技监管体系以FSC为主要许可机关，FSS负责日常监督，韩国互联网振兴院（KISA）负责信息安全认证，KoFIU负责反洗钱报告监管。《电子金融交易法》2021年修订后引入"MyData"（本人信用信息管理业）制度，构建了以消费者数据主权为核心的开放银行生态系统。
2. 外资企业的许可与登记要求
外资金融科技企业须在韩国设立子公司或分支机构方可申请经营资质。主要类别包括：
- 电子支付结算代行业（PG）：最低注册资本10–30亿韩元
- 预付式电子支付手段发行业：最低注册资本10–30亿韩元
- 电子货币发行业：最低注册资本50亿韩元（约合380万美元）
- 小额海外汇款业：最低注册资本20亿韩元（约合150万美元）
3. MyData制度与开放银行
韩国MyData制度于2022年1月正式上线，赋予消费者将其在银行、保险、信用卡公司、电信运营商及电商平台的金融数据汇聚至单一平台的权利。外资企业若希望汇总韩国消费者金融数据，须取得FSC颁发的MyData经营许可（본인신용정보관리업 허가）。截至2026年，持牌机构已超过80家。
4. 数据保护义务
金融科技业务涉及大量个人及信用信息处理，须同时遵守PIPA和CIPA：数据最小化原则、明示同意机制、72小时泄露通知义务、禁止未经授权跨境传输等。涉及信用评分或自动决策的外资企业还须取得信用信息业经营许可。
5. 跨境支付与外汇合规
根据《外国汇兑交易法》（FETA），提供跨境汇款、外币钱包或多币种支付的金融科技企业须向FSC登记为小额海外汇款业或外国汇兑中介业者，并持续满足最低资本和ISMS认证要求。
6. 金融监管沙盒
韩国《金融科技产业支持特别法》设立金融监管沙盒制度（혁신금융서비스），允许不符合现行许可类别的创新服务在最长4年的沙盒期内试运营，期间豁免部分EFTA许可要求。外资企业可直接申请或通过韩国合作方申请。
📌 官方参考资料
常见问题解答（FAQ）
Q1：外资金融科技企业能否在不设立韩国本地主体的情况下在韩经营？
不可以。根据《电子金融交易法》，所有受监管支付活动须通过在韩设立的子公司或分支机构开展，纯境外模式不被允许。
Q2：FSC许可审批需要多长时间？
登记类业务约需2–3个月，许可类业务约需4–6个月。加上ISMS认证周期（6–12个月），整体从规划到运营约需12–18个月。
Q3：韩国的MyData制度与欧盟GDPR数据可携权有何不同？
GDPR第20条数据可携权是一种被动权利，而韩国MyData制度建立了一套商业化运营框架，许可的MyData运营商可主动代表消费者汇聚、分析多平台数据，是有商业变现潜力的主动服务生态系统。
Q4：金融科技企业在韩国需要实施哪些反洗钱合规程序？
须包括：董事会批准的反洗钱政策、向KoFIU注册的合规官员、基于风险的客户尽职调查、自动交易监控、1000万韩元以上现金交易报告，以及年度反洗钱培训等。
Q5：韩国开放银行系统是否允许外资金融科技接入消费者银行账户数据？
可以，但须通过持有EFTA登记资质的韩国法律实体，并与金融结算院（KFTC）签订开放银行参与协议，且须经账户持有人明确授权。
📚 相关文章
📋 Korean Law Insight | ビジネス法 / データプライバシー
NOH UJIN 弁護士 | HANBYOL LAW LLC、ソウル
韓国のフィンテック・デジタル決済規制：外国企業向け完全法律ガイド（2026年版）
韓国はスマートフォン普及率95%超を誇るデジタル決済先進国であり、モバイルウォレット、QR決済、BNPL（後払い）、オープンバンキングが急速に普及しています。外国フィンテック企業が韓国市場に参入するには、電子金融取引法（EFTA）、個人情報保護法（PIPA）、信用情報の利用及び保護に関する法律（CIPA）、そして金融委員会（FSC）・金融監督院（FSS）の二次規制を熟知する必要があります。
1. 主要な規制当局と適用法令
韓国のフィンテック規制はFSCが許認可を所管し、FSSが日常監督を担当します。韓国インターネット振興院（KISA）はISMS認証を、金融情報分析院（KoFIU）はマネーロンダリング対策報告を監督します。2021年のEFTA改正では「MyData」（本人信用情報管理業）が導入され、消費者データ主権に基づくオープンバンキングエコシステムが構築されました。
2. 外国企業のライセンス・登録要件
外国フィンテック企業は韓国子会社または支店を設立した上でライセンスを取得する必要があります：
- 電子決済代行業（PG）・前払式電子決済手段発行業：最低資本金10〜30億ウォン
- 電子マネー発行業：最低資本金50億ウォン（約380万米ドル）
- 少額海外送金業：最低資本金20億ウォン（約150万米ドル）
3. MyData制度とオープンバンキング
2022年1月に正式開始された韓国MyData制度は、消費者が銀行・保険・カード・通信・EC事業者の金融データをMyDataオペレーターを通じて一元管理できる仕組みです。韓国消費者の金融データを集約・分析する外国企業はFSCからMyData事業許可を取得する必要があります。2026年時点で80社超が許可を取得しています。
4. データ保護義務
フィンテック事業者はPIPA・CIPAの双方を遵守する必要があります。主な義務は、目的特定の明示的同意、データ最小化、72時間以内の漏洩通知、越境データ移転への制限（適切性認定または標準契約条項が必要）、自動意思決定に関する説明義務などです。
5. 越境決済と外国為替法（FETA）コンプライアンス
越境送金・外貨ウォレット・マルチカレンシー決済を提供するフィンテック企業は、FSCに少額海外送金業として登録するか、外国為替仲介業者の許可を取得する必要があります。少額海外送金業には最低資本金20億ウォンとISMS-P認証が求められます。
6. 金融規制サンドボックス
韓国のフィンテック産業支援特別法に基づく金融規制サンドボックス（혁신금융서비스）では、既存のライセンス区分に該当しない革新的サービスが最大4年間のパイロット期間中にEFTAライセンス要件の一部免除を受けながら営業できます。外国企業は直接またはパートナーを通じて申請可能です。
📌 公式リファレンス
よくある質問（FAQ）
Q1：韓国に拠点を設けずに営業できますか？
できません。EFTAは電子金融業者が韓国法人または外国会社の韓国支店であることを要求しており、純粋な越境モデルは認められていません。
Q2：FSCのライセンス取得にはどのくらいかかりますか？
登録業務は2〜3か月、許可業務は4〜6か月です。ISMS-P認証（6〜12か月）を含めると、計画から運営開始まで12〜18か月を見込む必要があります。
Q3：韓国MyDataとGDPRのデータポータビリティの違いは何ですか？
GDPRは受動的な個人の権利ですが、韓国MyDataは許可を受けた事業者が消費者に代わって多様なプラットフォームのデータを能動的に集約・分析できる商業サービスエコシステムです。
Q4：外国フィンテック企業に求められるAML/CFT対応は？
取締役会承認のAMLポリシー、KoFIUへの届出コンプライアンスオフィサー、リスクベースのCDD/EDD、取引モニタリング、1,000万ウォン超の現金取引報告、年次AML研修などが必要です。
Q5：韓国オープンバンキングで消費者の口座データにアクセスできますか？
EFTAの登録を持つ韓国法人として金融結済院のオープンバンキングに参加し、口座保有者の明示的同意を得ることで、残高・取引履歴（最大12か月）へのAPIアクセスが可能です。
📚 関連記事
📋 Korean Law Insight | Derecho Empresarial / Privacidad de Datos
Por el Abogado NOH UJIN | HANBYOL LAW LLC, Seúl
Regulación Fintech y Pagos Digitales en Corea para Empresas Extranjeras: Guía Legal Completa 2026
Corea del Sur es uno de los ecosistemas de pagos digitales más avanzados del mundo, con una tasa de penetración de smartphones superior al 95% y una base de consumidores que adopta activamente billeteras móviles, pagos QR, BNPL y servicios de banca abierta. Para las empresas fintech extranjeras que deseen ingresar al mercado coreano, es esencial comprender la Ley de Transacciones Financieras Electrónicas (EFTA, 전자금융거래법), la Ley de Protección de Información Personal (PIPA), la Ley de Uso y Protección de Información Crediticia (CIPA) y las regulaciones secundarias emitidas por la Comisión de Servicios Financieros (FSC) y el Servicio de Supervisión Financiera (FSS).
1. Marco Regulatorio: Principales Estatutos y Reguladores
El sistema regulatorio fintech de Corea tiene como autoridad central a la FSC para las licencias, la FSS para la supervisión diaria, la Agencia de Seguridad e Internet de Corea (KISA) para la certificación de seguridad de la información (ISMS), y la Unidad de Inteligencia Financiera de Corea (KoFIU) para el cumplimiento AML/CFT. La reforma de 2021 de la EFTA introdujo el régimen "MyData" (gestión de información crediticia personal), creando el ecosistema de banca abierta centrado en la soberanía del consumidor.
2. Requisitos de Licencia y Registro para Empresas Extranjeras
Las empresas fintech extranjeras deben establecer una filial o sucursal en Corea para solicitar las licencias pertinentes:
- Operadores de pasarela de pago (PG) / emisores de medios de pago prepago: capital mínimo KRW 1.000–3.000 millones
- Emisores de dinero electrónico: capital mínimo KRW 5.000 millones (aprox. USD 3,8 millones)
- Servicio de remesas al exterior de pequeño importe: capital mínimo KRW 2.000 millones (aprox. USD 1,5 millones)
3. MyData y Banca Abierta
El régimen MyData de Corea, lanzado oficialmente en enero de 2022, otorga a los consumidores el derecho a consolidar sus datos financieros de bancos, aseguradoras, emisoras de tarjetas, operadoras de telecomunicaciones y plataformas de comercio electrónico en un único servicio gestionado por un operador de MyData con licencia. Las empresas extranjeras que deseen agregar datos financieros de consumidores coreanos deben obtener una licencia de operador MyData de la FSC. En 2026, más de 80 entidades cuentan con esta licencia.
4. Obligaciones de Protección de Datos
Las operaciones fintech están sujetas a PIPA y CIPA: consentimiento explícito e informado, minimización de datos, notificación de brechas en 72 horas, restricciones a la transferencia transfronteriza de datos, y obligación de explicación en decisiones automatizadas. Las empresas que realicen scoring crediticio con datos alternativos también deberán obtener una licencia de negocio de información crediticia bajo la CIPA.
5. Pagos Transfronterizos y Cumplimiento FETA
Las fintechs que ofrezcan remesas internacionales, billeteras en divisas o pagos multidivisa deben registrarse como operadores de remesas al exterior de pequeño importe o como intermediarios de cambio de divisas ante la FSC, cumpliendo con los requisitos de capital mínimo y la certificación ISMS-P.
6. Caja de Arena Regulatoria Fintech
La Ley Especial de Apoyo a la Industria Fintech de Corea establece una caja de arena de innovación financiera que permite a los operadores lanzar servicios piloto por hasta 4 años, con exención parcial de los requisitos de licencia EFTA, mientras se desarrolla el marco regulatorio permanente. Las empresas extranjeras pueden postular directamente o a través de un socio coreano.
📌 Referencias Oficiales
Preguntas Frecuentes (FAQ)
P1: ¿Puede una empresa fintech extranjera operar en Corea sin establecer una entidad local?
No. La EFTA exige que los operadores de servicios financieros electrónicos sean una corporación coreana o una sucursal coreana de una empresa extranjera. El modelo puramente transfronterizo no está permitido para actividades de pago reguladas dirigidas a consumidores coreanos.
P2: ¿Cuánto tiempo tarda el proceso de licenciamiento de la FSC?
Los servicios de registro suelen tardar 2–3 meses; los servicios de licencia, 4–6 meses. Incluyendo la certificación ISMS-P (6–12 meses), el plazo total desde la planificación hasta el lanzamiento es de 12–18 meses.
P3: ¿En qué se diferencia el régimen MyData de Corea del derecho a la portabilidad de datos del RGPD?
El RGPD otorga un derecho pasivo de portabilidad, mientras que el MyData coreano crea un ecosistema de servicios activos y comercializables donde operadores licenciados agregan y analizan activamente datos de múltiples plataformas en nombre del consumidor.
P4: ¿Qué documentación AML/CFT debe implementar una fintech extranjera en Corea?
Política AML aprobada por el directorio, oficial de cumplimiento registrado ante KoFIU, marco CDD/EDD basado en riesgos, monitoreo automatizado de transacciones, declaración de operaciones en efectivo superiores a KRW 10 millones, y capacitación anual en AML para el personal pertinente.
P5: ¿El sistema de banca abierta de Corea permite a fintechs extranjeras acceder a datos de cuentas bancarias de consumidores?
Sí, a través de una entidad legal coreana con registro EFTA válido y acuerdo de participación con el KFTC, y con el consentimiento explícito del titular de la cuenta.
📚 Artículos Relacionados
¿Necesita Asistencia Legal?
HANBYOL LAW LLC ofrece asesoramiento jurídico coreano experto para empresas internacionales de fintech y servicios financieros.
📧
ujin95@hanbl.co.kr | 🌐
www.hanbl.co.kr
Las consultas iniciales son gratuitas.
Comments
Post a Comment