This chapter highlights Korea’s approach to building a data-driven public sector. It explores the legal and institutional frameworks for data use, internal and external data sharing, including open data publication, while noting emerging challenges related to data privacy, interoperability, and the need for robust data governance and support to public institutions.
Digital Government Review of Korea
Harnessing Digital and Data to Transform Government
Abstract
Data is a foundational asset for 21st-century governments, essential for designing and delivering human-centred policies and services in pursuit of better outcomes for society. Public-sector data sharing generates social and economic benefits estimated between 0.1% and 1.5% of GDP, rising to as much as 4% of GDP when including private-sector data. The extent of these benefits depends on how open, accessible, and well-governed the data is (OECD, 2019[1]). In this context, governments face rising pressure to meet growing citizen expectations, manage complex policy challenges, and operate with greater efficiency and transparency.
Korea is advanced in this area thanks to a robust data policy and sustained government investments over many years, which are now bearing fruit. Korea ranks first among OECD countries in the 2023 OECD Digital Government Index (DGI) assessment of government data maturity (Figure 4.1). This Index evaluates whether governments have enablers such as national data strategies; interoperability frameworks; foundational data infrastructure; and measures to ensure data quality, protection, sharing, and reuse; among other issues.
Source: (OECD, 2024[2])
Korea also ranks first among OECD countries in open data maturity according to the OECD Open, Useful and Re-usable Data (OURdata) Index (Figure 4.2) (OECD, 2023[3]). The Index measures the maturity of government open-data policies (e.g., the existence of a strategy, requirements, stakeholder engagement, re-use initiatives) and their implementation (i.e., publication of high-value datasets). Korea has strong policies and frameworks for publishing open data and fosters a dynamic, national open-data ecosystem, including active engagement with start-ups and the private sector. Korea stands out from OECD countries for its engagement with the private sector and other data users to promote the re-use of government data for innovation. This is an important factor in Korea’s significantly higher performance.
Source: (OECD, 2023[3])
While Korea is recognised internationally for its approach to data in the public sector, this is a rapidly evolving area. Digital technologies, particularly artificial intelligence (AI), transform how data can and should be collected, analysed, and used in the public sector (OECD, 2025[4]; OECD, 2025[5]). At the same time, these advances raise challenges related to data governance, ethical use, privacy, interoperability, and public trust. Korea must keep pace with these developments, and the remainder of the chapter will examine how best to do so.
Good data governance underpins the public sector’s ability to access, share, and use data to its fullest potential. This includes enabling the use of data to develop, implement, and monitor public policies and services, and enhance internal efficiency. Data governance covers the technical, policy, and regulatory frameworks to manage data throughout its lifecycle and across policy domains, such as health, research, public administration, and finance (OECD, 2025[6]).
The OECD’s framework for data governance in the public sector identifies six elements of public-sector data governance across the three phases of strategy, tactics, and delivery. Effective data governance begins with leadership and a strategic vision that treats data as an asset. It also requires enabling rules and regulations for data sharing and use, including interoperability and data protection, as well as skilled personnel, spaces for experimentation, and a robust data infrastructure to enable data sharing and integration (OECD, 2019[7]).
Source: (OECD, 2019[7])
Strategic leadership and vision
Korea shows a strong political commitment to making better use of data, with an active, top-down leadership approach. The Ministry of the Interior and Safety (MOIS) and the National Information Society Agency (NIA) lead and steer the development and implementation of policies for public-sector data access and sharing. This leadership enables a clear, unified vision and aligns government agencies toward common goals. These efforts have shown their effectiveness, with 85% of surveyed public institutions believing that managers and frontline public officials recognise the value of data and are motivated to improve data management (OECD, 2024[8]).
Korea’s strategic vision for data use in the public sector is underpinned by a robust legislative framework. Besides the Electronic Government Act, which covers provisions on data sharing, the Act on the Promotion of Data-Based Administration enacted in 2020 provides the legal foundation for fostering a data-driven public sector in Korea. Its objective is to enhance the accountability, responsiveness, and reliability of public institutions while improving quality of life for citizens through objective, evidence-based policy-making and service delivery. The Act defines “data-based administration” as the use of data (whether generated or obtained by public institutions, private companies, or other entities) for policy formulation and decision making (Government of Korea, 2020[9]). It covers the full data lifecycle, including collection, storage, processing, analysis and visualisation, at both central and local government levels.
The Act establishes a long-term, systematised approach to public-sector data governance. It mandates MOIS to develop a Master Plan for Promoting Data-Based Administration every three years. This plan, prepared in consultation with other government bodies and subject to deliberation by a committee, outlines core objectives, medium- to long-term development directions, legal and institutional reforms, sectoral strategies, data infrastructure and interoperability initiatives, capacity-building measures, and funding arrangements. The Act also mandates and empowers MOIS to issue guidelines for sectoral implementation across the public sector and request information from public bodies to inform the plan. In parallel, each central and local government authority must prepare annual implementation plans aligned with the Master Plan. These should include assessments of progress, annual priorities, data-management strategies, co-ordination mechanisms, and workforce-development plans (Government of Korea, 2020[9]).
In addition, the Act on the Promotion of the Provision and Use of Public Data, adopted in 2013 promotes the proactive release and reuse of public-sector data to support citizens’ right to access public information and open data, and stimulate innovation and economic growth. It requires public institutions to make data openly available wherever possible and mandates MOIS to work in consultation with the Ministry of Science and ICT on (MSIT)— a national Master Plan on Promotion and Use of Public Data every three years (Government of Korea, 2013[10]). Together, these two Acts establish the legal and policy backbone of Korea’s data-governance framework, guiding internal administrative reform and broader efforts to enable data reuse across society.
Finally, the National MyData Innovation Promotion Strategy launched in 2023 by the Personal Information Protection Commission (PIPC) establishes a framework for data portability across sectors. Rooted in amendments to the Personal Information Protection Act (PIPA), the strategy sets out a phased rollout of the MyData system, beginning with ten high-impact sectors such as healthcare and public welfare (Personal Information Protection Commission, 2023[11]). The MyData initiative empowers individuals with greater control over their personal data, enhances interoperability between institutions, and stimulates innovation by enabling safe and seamless data sharing. Key elements of the strategy include promoting strong privacy safeguards, sector-specific implementation plans, and support for intermediary platforms. The initiative is described in detail in later sections of this chapter.
Capacity to implement public-sector data strategy
Co-ordination
Korea ensures coherence in implementing its data strategy across the public sector through a governance framework established under the Act on the Promotion of Data-Based Administration. The Act is implemented by the Open Data Strategy Council, chaired by the Prime Minister. The Council has up to 35 members, combining government officials and external experts, and is supported by MOIS, which also serves as its secretariat. It operates two subcommittees: one on data-based administration and the other on the provision and use of open government data. (OECD, 2025[12]). The Act also requires central government bodies and local governments to prepare annual implementation plans aligned with the national master plan. These must include evaluation metrics, workforce-development strategies, budget management, and proposals for inter-agency data sharing. To support implementation, every public institution designates a data-based administration officer, which the OECD considers a good practice (OECD, 2025[12]).
A similar approach applies under the Act on Promotion of the Provision and Use of Public Data. The Council co-ordinates major open data policies, including the development of master and implementation plans, setting data release priorities, and improving related systems. It is supported by a working subcommittee and expert groups that enable in-depth technical deliberation across varied fields. All levels of government are required to submit annual implementation plans for review and approval by the Council. These must include evaluations of progress, budgetary plans, data-quality measures, and initiatives to promote access to and the use of open data (Government of Korea, 2013[10]; OECD, 2025[12]). The Council also operates the Open Data Mediation Committee that mediates disputes when public institutions refuse or discontinue the provision of open data (OECD, 2025[12]).
Finally, whole-of-government co-ordination of the National MyData Innovation Promotion Strategy is secured through a newly established MyData Task Force and a public-private council. This strategy, while not led by MOIS, complements Korea’s broader public-sector data-governance framework given that the MyData initiatives also cover public-sector data sharing and public-private data sharing (OECD, 2025[12]).
Skills and financial resources
Implementing data policies and strategies requires sufficient human and financial resources. This includes access to skilled staff, sustained investment in data infrastructure and tools, and dedicated financing through strategic planning and budgeting processes (OECD, 2019[7]). Without these foundations, data initiatives risk falling short of their objectives.
Korea strengthens data literacy through structured policies and targeted training. Article 24 of Korea’s data legislation mandates long-term workforce planning and the development of curricula and qualification standards for data-related roles, led by the MOIS and the MSIT. As explained in Chapter 3, MOIS leads the Korean Digital Civil Servant Competency Framework (Chapter 2), which identifies data-based policy analysis as one of three core skill domains. In parallel, MOIS developed a Guideline for Building Data Capability of Public Institutions, which includes the Data Capability Indicator Framework and a Four-Step Procedure for Enhancing Data Capability covering diagnosis, planning, implementation, and evaluation (OECD, 2025[12]).
In terms of implementation, 54% of public institutions surveyed in Korea believe there are sufficient financial resources to improve data management, including 8% who strongly think so (OECD, 2024[8]). The other 46% think resources are only somewhat sufficient (23%) or not sufficient at all (23%). Yet as discussed in Chapter 2, some public institutions feel constrained by the government annual budget-allocation process, which they see as rigid and impacting their ability to keep pace with data-governance developments. While 54% of public institutions in Korea believe they have sufficient skilled personnel to improve data management, 46% either disagree or find skills only somewhat adequate (OECD, 2024[8]).This indicates an opportunity to design and implement more agile financing mechanisms to address skilling gaps in the public sector in a more efficient way.
These structural initiatives are reinforced by practical online training programmes, such as the 2023 and 2024 Cyber Education offerings, with modules like “Transform Your Report with Just Excel!”, “First Steps as a Data Leader”, and “Data-Based Administration and Data Literacy”, as well as the Public Data Quality Management Training Platform. Despite these efforts, data literacy remains an area for development. There is a need to deepen and broaden data skills across all levels of government to embed data-informed decision-making in everyday public administration. Strengthening practical, hands-on capabilities and promoting a culture that values and uses data are critical to sustaining progress. This includes more targeted training in data-sharing and privacy-enhancing technologies, currently seen as barriers to more effective data use in government (OECD, 2025[12]).
Rules, guidelines, and standards for data sharing and use
As governments increase reliance on data to deliver integrated services and support evidence-based policy-making, legal frameworks must enable the secure and efficient sharing of information across agencies, and the straightforward provision of data by citizens. Digital-ready regulation is key to ensuring that data can flow while maintaining high standards of privacy, security, and accountability. As discussed earlier, the primary laws in Korea affecting data sharing and use include the:
Electronic Government Act
Personal Information Protection Act (PIPA)
Act on the Promotion of Data-Based Administration
Act on the Promotion of Provision and Use of Public Data
Meanwhile, some laws have not yet been updated to facilitate smooth data flows across the public sector. The Enforcement Decree of the Certification Seal Imprint Act still requires the storage, use, or sharing of physical documents and handwritten signatures, which creates unnecessary friction and hampers data sharing and seamless public-service delivery (Government of Korea, 2016[13]). To simplify administrative procedures and cut red tape, amendments are underway that will allow the issuance of electronic seal certificates through the GOV24 platform.
To further reduce the unnecessary use of physical documents, four bills were submitted to the National Assembly to clarify that electronic documents are legally recognised as originals wherever originals are required to be stored or verified. In addition, 23 Presidential decrees and sub-decrees were promulgated, and further legal and institutional reforms are planned. These include a legal revision to allow public agencies to verify bank account information electronically, eliminating the requirement for applicants to submit physical copies of passbooks when applying for government benefits ((n.a.), 2025[14]).
Lastly, as explained earlier, recent amendments to the PIPA make it more difficult for public sector bodies to exchange and match datasets, particularly when doing so requires the national identification number. Public agencies now need to invest more in anonymisation or pseudonymisation techniques, legal-compliance efforts, and secure infrastructure. These challenges could be mitigated through more hands-on training and support for public servants (OECD, 2024[15]).
Data infrastructure and architecture
Delivering value throughout government data requires reliable infrastructure, robust architecture, and coherent governance to ensure data flows seamlessly across all phases, from collection, to processing, sharing, and use and reuse (OECD, 2019[7]). Korea’s evolving approach to digital government, especially its transition to cloud-native infrastructure and its strengthening of foundational registries and Application Programming Interface (API) management demonstrate progress in creating an enabling infrastructure for a data-driven public sector.
Public institutions in Korea report that they are satisfied with the existing data infrastructure (OECD, 2024[8]). However, a main barrier to data use in the public sector is the lack of information about available datasets. Thus, improvements to data infrastructure could make datasets more easily findable and available for reuse. This could include the development of data catalogues that list datasets available for internal sharing and reuse only in the public sector, even if not accessible to the public. One example is the United States, where federal agencies are required to develop, maintain, and publish data-asset inventories (Box 4.1).
In the United States, federal agencies are required to maintain and publish comprehensive data inventories as part of a broader effort to promote transparency, improve data management, and enable data reuse. These requirements are set out in the Foundations for Evidence-Based Policymaking Act of 2018 (“Evidence Act”) and reinforced by OMB Memorandum M-19-23 on the Federal Data Strategy.
Under the Evidence Act, each federal agency must develop and maintain a comprehensive data inventory that accounts for all data assets created, collected, or under the control or direction of the agency. Agencies must make their data inventories available to the public “to the extent practicable”, through the Data.gov platform, with sensitive or restricted-access data flagged appropriately.
Implementation practices include:
Designation of Chief Data Officers (CDOs) – agencies appoint a CDO responsible for data governance and compliance with inventory requirements
Use of metadata standards – data assets are described using standard metadata schemas to ensure consistency and interoperability
Incremental publication – agencies prioritise high-value datasets for early publication while continuing to expand coverage over time
Cataloging public and non-public data – inventories distinguish between datasets that are publicly available and those that are restricted due to privacy, security, or other considerations
The U.S. approach fosters a culture of data stewardship across government while enabling researchers, developers, and the public to find and access federal data more easily.
Korea has an integrated, cloud-based infrastructure through the National Information Resources Service (NIRS), which operates shared government data-centres and offers cloud services via the Government-Wide Cloud (G-Cloud) system (National Information Resources Service, 2025[19]; OECD, 2025[12]). This infrastructure is backed by a legal and strategic framework, including Article 54-2 of the Electronic Government Act and the 4th Master Plan for Cloud Computing, which mandates cloud adoption across the public sector. The Cloud-Native Transition Plan and accompanying user guides ensure that administrative and public institutions have practical guidance to migrate their services and information systems (Government of Korea, 2023[20]).
In addition, Korea’s public-sector API ecosystem demonstrates advanced segmentation aligned with user needs. Open APIs are available through the national open-data portal Data.go.kr, while internal administrative data is exchanged via the Public Information Sharing System (see below). The GOV24 system supports inter-agency integration, and a unified platform enables public-private digital-service integration (Chapter 6). This structured approach to API management supports secure, reliable, and efficient data flows across government and with external actors.
At the architectural level, Korea is strengthening its base registry framework through Article 44-2 of the Electronic Government Act and the Government Master Data Management System (GMD). These initiatives aim for a consistent definition and use of master data across ministries and agencies, in line with OECD countries such as Norway and Sweden (OECD, 2024[21]; OECD, 2024[22]).
The OECD encourages data access and sharing arrangements that ensure public sector data are as open as possible to maximise their benefits, and as closed as necessary to protect public and private interests, including those related to national security, law enforcement, privacy and personal data-protection, and intellectual property rights (Figure 4.4) (OECD, 2024[23]; OECD, 2021[24]). The term “data access and sharing arrangements” refers to institutional, regulatory, policy, legal, and contractual frameworks that establish the conditions to access and share data (OECD, 2021[24]).
Source: Adapted from (OECD, 2019[98]; OECD, 2021[117])
Most public institutions surveyed in Korea collect, process, and reuse identifiable data on citizens (69%) and businesses (77%), highlighting the public sector’s role as a service provider (Figure 4.6) (OECD, 2024[8]). A similar share (77%) process non-personal data, such as environmental information, reflecting the range of policy areas involved. In contrast, anonymised data on citizens and businesses or data related to national security are used less frequently.
Source: (OECD, 2024[8])
The main sources of data processed by Korean public institutions are internal: 100% of institutions surveyed rely on their own organisational data, 92% access data from base registries (such as the business or resident register), and 84% source data from other public sector institutions within the same policy area (OECD, 2024[8]). Between 44% and 55% of institutions reported using research data, citizen self-reported data, or data from public institutions outside their immediate policy domain. Less than a quarter of institutions rely primarily on external data sources, such as private-sector organisations, non-governmental organisations, media, citizen-extracted data (e.g., video surveillance), or data from international organisations.
Sharing data in the public sector: the ‘once-only’ principle
Data sharing is important for governments to provide seamless services and make informed policy decisions. One objective is the ‘once-only’ principle of making sure that individuals and businesses should have to provide their data to the government only once (OECD, 2024[23]; OECD, 2024[22]). To achieve this, public institutions need to be able to access and share data with each other securely and responsibly. This kind of data sharing should follow rules that define who can access data, how it can be used, and for what purposes (OECD, 2021[24]). These safeguards are important when handling sensitive data such as personal information (e.g., health records, personal-identification data, tax data), credentials (e.g., driving licences, work permits), or information critical to public safety and national security. Controlled data sharing often takes place between government agencies or trusted service providers in accordance with national laws on privacy, security, and confidentiality. The goal is to protect individuals’ rights while making sure the data is used to deliver services in line with national legislation.
The public-sector MyData Initiative established in 2019 and led by the National Information Society Agency (NIA) lets individuals request that their personal data held by public institutions be shared with other public bodies with consent for the purpose of simplifying access to and interaction with public services (Ministry of the Interior and Safety, 2025[25]). The Personal Information Protection Act (PIPA) amended in 2023 provides the legal basis to implement the system across sectors, including the public sector and the financial sector. Currently, data from over 139 types of public services, including proof of birth or family relationships, tax records, and military service documentation can be shared automatically through APIs with public agencies or essential services providers to support public-service delivery and reduce the administrative burden.
Government bodies in Korea share data internally through the Public Information Sharing System operated by MOIS (OECD, 2025[12]). Under the Electronic Government Act, agencies must use this system unless there is justifiable reason not to. According to the Act, ministries and agencies must share their administrative data with other agencies that require it. Where reliable administrative information is available from another agency, the same information should not be collected separately (Government of Korea, 2022[26]). The Act allows sharing and joint use of administrative information required for civil complaints, administrative tasks, or legally mandated duties, excluding sensitive or confidential data such as national security information. Agencies must ensure that shared data is accurate, up-to-date, and used only for specific, necessary purposes. Applications for joint use must be approved by MOIS in consultation with the data-holding agency. If the data involves personal information, consent must be obtained from the data subject, and consultations should be held with PIPC to ensure compliance with privacy and data-protection regulations (Government of Korea, 2022[26]). The Public Information Sharing System has its own website, www.share.go.kr, where institutions and citizens can read about the system and download monthly statistics about data-sharing activities.
Despite progress to enable safe and secure data sharing across agencies, several public-sector institutions in Korea raised concerns during the OECD fact-finding mission about increasing challenges in sharing and combining datasets that contain personal information. Specifically, such data can only be matched and combined using the Resident Registration Number (RRN), which is tightly regulated. Recent legislative amendments introduced stricter requirements, mandating that shared data must be anonymised or pseudonymised. While these measures strengthen data protection and privacy for good reasons, they also create challenges for public institutions that now need more support and guidance to understand how and what data they can combine while ensuring regulatory compliance, as well as more support to apply privacy-enhancing technologies (PET), including anonymisation or pseudonymisation (OECD, 2024[15]). The Korean government could invest in more tailored support and dedicate resources and mechanisms to strengthening public institutions' ability to share and use data to its potential, while complying with regulations.
Sharing government data with the broader ecosystem
Sharing government data with external actors – whether through open data initiatives, controlled access frameworks, or data partnerships – can generate substantial economic value (OECD, 2021[24]). A 2023 estimate by the European Commission valued the global data economy at approximately EUR 1.5 trillion in 2021, with projections reaching EUR 2.6 trillion by 2025 (European Commission, 2023[27]).
The OECD estimates that the use and reuse of public-sector data can contribute between 0.1% and 1.5% of GDP (OECD, 2019[1]). In these cases, data access can be shared either on non-discriminatory terms (meaning anyone can access and use the data regardless of who they are) or with specific organisations for specific purposes in a secure, controlled environment. An example of the first is the European Data Spaces, which are sector-specific frameworks that enable the secure, trustworthy, and interoperable sharing and use of data across the EU in areas such as mobility, public administration and language. The data spaces have fair, transparent, proportionate, and non-discriminatory access rules (OECD, 2024[23]; European Commission, 2025[28]). As part of the MyData Initiative, Korean public institutions can share citizens' data directly with essential service providers such as banks, with the consent of the data subjects and for specified reasons, such as to open a bank account (Government of Korea, 2022[26]).
Another way to share government data is as open data, where the data is available for anyone to access, use, and reuse free of charge in machine-readable formats and subject only to minimal conditions, such as citing the source (OECD, 2024[23]). Open data can help businesses, in particular micro-, small-, and medium-sized enterprises (MSMEs), access data critical to developing new services, support academic research, and enable civil society to hold governments accountable (OECD, 2023[3]). One example in Korea is the National Priority Data Releasing Project led by MOIS (Box 4.2). It focuses on making high-value government datasets available to support innovation (OECD, 2024[23]).
The National Priority Data Releasing Project is a MOIS initiative to support dissemination of impactful open data. From the outset, the project identified data for release based on private-sector demand through comprehensive surveys to uncover new and relevant data sources. To ensure effective data dissemination, a collaborative body was established comprising citizens, public institutions, data companies, experts, and other stakeholders. This collaboration focuses on meeting the private sector's needs and demands.
The initiative made significant strides in improving citizens' quality of life by releasing open data related to everyday concerns such as real estate, weather, and transportation. This data is also easily accessible to companies for use in private applications and to enhance public services.
To date, over 11,000 Open APIs and 217 datasets of National Priority Data are available through www.data.go.kr. Further, more than 3,100 known mobile applications and web services leveraging this data were developed and are in operation.
Since 2013, MOIS has operated the Open Data Portal (www.data.go.kr) to enable citizens to conveniently use public data, with 103,000 data provided by 1,100 institutions including central, local, and public entities. Areas with the highest disclosure rate include public administration (14.9%), culture & tourism (12.1%), industry employment (9.3%), transport & logistics (8.3%), environment & weather (7.8%).
Source: (OECD, 2024[23])
According to OECD research, Korea provides 81% of high-value government datasets as open data, well above the 47% OECD average (Figure 4.7) (OECD, 2023[3]). This list, based on the original G8 Open Data Charter, includes ten categories such as company data, meteorology, geospatial information, statistics, environment, health, education, and government finances and accountability (which covers public procurement, budgets, spending, and election data, among others). Korea performs above the OECD average in all ten categories, highlighting its commitment to open data and data prioritisation (OECD, 2023[3]; OECD, 2022[29]). Most of these data are provided in accessible formats using methods such as APIs, with clear, standardised descriptions, simplifying data discovery and re-use (OECD, 2023[3]).
Source: (OECD, 2022[29]; OECD, 2023[3])
Accessing external data for use in the public sector
Accessing non-public-sector data is important to inform policies and deliver public services. As discussed, some Korean public-sector institutions make use of external data, though to a lesser extent than data from within the public sector. Under Articles 14 and 15 of the Electronic Government Act, public agencies in Korea may request data from private companies, organisations, or individuals to support data-driven government operations These requests are made through contracts or formal agreements. MOIS facilitates data-sharing partnerships with the private sector and signs agreements on behalf of other government bodies when needed. The procedures for these agreements are laid out in a Presidential Decree. Once a government agency receives private-sector data, it is only allowed to use it for the agreed purpose and may not share it with third parties. When the data is no longer needed – whether the purpose was fulfilled or the retention period expired – it must be securely destroyed with steps taken to prevent recovery. Agencies are required to have strong security measures to protect the data from tampering, loss, or unauthorised access (Government of Korea, 2022[26]).
The use of data across Korea’s public-sector institutions is extensive. All thirteen of the institutions surveyed reported using data to support evidence-based policy-making (OECD, 2024[8]). However, there is room for growth in applying data to the design of public services (46%) or developing a deeper understanding of citizen needs (46%). Also, fewer organisations use data to predict outcomes (38%) or explore alternative future scenarios (38%).
While the use of data to improve public services in general is comprehensive (100%), more-targeted use remains limited (OECD, 2024[8]). Only 31% of institutions use data to free-up government capacity, and just 38% use it to improve crisis response or public engagement, meaning there is an opportunity to promote data use in these areas. MOIS shares structured and unstructured disaster- and safety-management data through the Public Disaster and Safety Portal (Ministry of the Interior and Safety, 2025[30]). This lets public servants and other users easily find and analyse information. The platform is used to develop and implement predictive models for disaster response. These support the identification and removal of wildfire risk factors, real-time detection of river flooding, prevention of fire outbreaks, and forecasting of urban flood risks.
When evaluating and monitoring government interventions, public-sector institutions focus on tracking operational performance (92%), with fewer using data to evaluate policy outcomes (31%) or demonstrate return on investment (8%) (OECD, 2024[8]). Notably, no institutions reported using data to ensure accountability through audit trails. Perceived barriers to using data among public-sector institutions in Korea could explain why data is not used to its full potential. According to the survey (Figure 4.7), the main perceived barriers are:
1. Lack of information about available data sets (62% of public-sector institutions say this is one of their top three barriers)
2. Need for procedural support to access data (54%)
3. Data interoperability and standardisation (38%)
On a positive note, relatively few organisations see current laws and regulations, data governance, or the accuracy, integrity and incompatibility of data as barriers to its use.
% of 13 institutions that ranked the issue as one of their top 3 barriers
Source: OECD (2024[8])
In Korea, fewer people, on average, believe that public agencies would use their personal data appropriately (Figure 4.8) (OECD, 2024[31]). The government is currently taking steps to strengthen public confidence, including prioritising privacy and consent reforms and mechanisms, transparency, and digital security in data practices.
Importantly, in recent years, Korea strengthened its data-protection framework by amending the PIPA and laws regulating the use of the national identification number. These reforms are part of an effort to align with global privacy standards, enhance data security, and reinforce individual rights. Key amendments include:
Stricter conditions for using the national resident number (national ID number), which may no longer be used freely across government agencies for data matching unless specific legal grounds exist
Expansion of anonymisation and pseudonymisation requirements, especially when personal data is shared between institutions. These requirements are now more strictly enforced, limiting how identifiable information can be processed
Increased oversight and accountability, with the PIPC playing a stronger enforcement role
Enhanced individual rights, such as the right to data portability (via MyData) and stricter consent requirements
While these reforms align with OECD practices, they also reinforce, as noted earlier, the need to support public servants in meeting new requirements and ensuring that data is shared to its full potential in a secure, privacy-protecting, and efficient manner.
Share of population
Note: The figure presents in-country distribution of responses to the question “If you shared your personal data with a public agency/office/department, how likely do you think it is that it would be used for legitimate purposes only?”. The “likely” proportion is the aggregation of responses from 6-10 on the scale; “neutral” is equal to a response of 5; “unlikely” is the aggregation of responses from 0-4; and “Don't know” was a separate answer choice. “OECD” presents the unweighted average of responses across countries.
Source: (OECD, 2024[31])
Korea’s digital security priorities are anchored by the 2024 National Cybersecurity Strategy, complemented by the National Master Plan for Cybersecurity, which focuses on expanding technical capacity, enhancing inter-agency co-ordination on cybersecurity threats, and reinforcing protection of critical infrastructure (OECD, 2025[12]).
Institutional oversight for digital security is led by the National Intelligence Service (NIS), which manages public-sector cybersecurity through regulatory and operational functions. The NIS oversees information sharing, threat assessments, incident response, and the technical evaluation of ICT systems, as well as ensured co-ordination of Cyber Security Centres within government bodies (OECD, 2025[12]). Legal instruments such as the Regulations on Cybersecurity Services (Government of Korea, 2013[32]) and PIPA ensure a structured governance framework, outlining clear responsibilities of public sector institutions for incident reporting, data protection, and inter-agency co-operation.
Korea performs above the world average in de facto and de jure government data transparency, as measured by the 2024 European Research Centre for Anti-Corruption and State-Building (ERCAS) Transparency Index (Alina, Mungiu-Pippidi, 2024[33]). Korea’s strength in open data shows that the government has invested considerable efforts in ensuring that citizens and businesses have easy access to data about government decisions and data underlying those decisions. Korea could still increase transparency about the use of algorithms and AI inside the public sector, including the data they use or are trained on (Chapter 5).
References
[14] (n.a.) (2025), Information provided by the Ministry of Interior and Safety to the OECD.
[33] Alina, Mungiu-Pippidi (2024), Transparency and Corruption: Measuring real transparency by a new index, https://doi.org/10.1111/rego.1250.
[17] Congress.gov (2019), H.R.4174 — 115th Congress (2017-2018): Foundations for Evidence-Based Policymaking Act of 2018.
[28] European Commission (2025), Common European Data Spaces, https://digital-strategy.ec.europa.eu/en/policies/data-spaces.
[27] European Commission (2023), Results of the European Data Market study 2021-2023, https://digital-strategy.ec.europa.eu/en/library/results-european-data-market-study-2021-2023.
[16] Federal Chief Data Officer’s Council (2022), CDOC Data Inventory Report, https://resources.data.gov/resources/CDOC_Data_Inventory_Report/.
[20] Government of Korea (2023), Integrated Standards for Information Resources of Administrative Agencies and Public Institutions, https://www.law.go.kr/LSW/admRulLsInfoP.do?admRulId=72547&efYd=0 (accessed on June 2025).
[26] Government of Korea (2022), Electronic Government Act, https://www.law.go.kr/LSW/eng/engLsSc.do?menuId=2§ion=lawNm&query=ELECTRONIC+GOVERNMENT+ACT&x=28&y=23#liBgcolor0.
[9] Government of Korea (2020), Act on the promotion of data-based administration, https://www.law.go.kr/LSW/eng/engLsSc.do?menuId=2&query=ACT%20ON%20THE%20PROMOTION%20OF%20DATA-BASED%20ADMINISTRATION#liBgcolor0.
[13] Government of Korea (2016), ENFORCEMENT DECREE OF THE CERTIFICATION OF SEAL IMPRINT ACT, https://elaw.klri.re.kr/eng_service/lawView.do?lang=ENG&hseq=37408 (accessed on June 2025).
[10] Government of Korea (2013), “Public Data Act”, in Act on the promotion of the provision and use of public data, Government of Korea, https://elaw.klri.re.kr/kor_service/lawView.do?hseq=47133&lang=KOR.
[32] Government of Korea (2013), National Cyber Security Management Regulations, https://www.law.go.kr/LSW/admRulLsInfoP.do?chrClsCd=&admRulSeq=2000000100482.
[30] Ministry of the Interior and Safety (2025), Integrated Disaster and Safety Information System, https://www.mois.go.kr/eng/sub/a03/bestPractices1/screen.do (accessed on July 2025).
[25] Ministry of the Interior and Safety (2025), Public MyData [translated from Korean], https://www.mois.go.kr/frt/sub/a06/b02/digitalOpendataMydata/screen.do (accessed on April 2025).
[19] National Information Resources Service (2025), World’s First Government Integrated Data Center, https://www.nirs.go.kr/ncia_MJS/board/dev/board/board.jsp?id=eng_101&cate=&key=subject&search=&order=&desc=asc&menu_num=null&mode=view&pg=1&idx=1422.
[6] OECD (2025), Data governance, https://www.oecd.org/en/topics/data-governance.html.
[5] OECD (2025), Enhancing Access to and Sharing of Data in the Age of Artificial Intelligence, OECD Publishing, Paris, https://www.oecd.org/en/publications/enhancing-access-to-and-sharing-of-data-in-the-age-of-artificial-intelligence_23a70dca-en.html.
[4] OECD (2025), Governing with Artificial Intelligence: The State of Play and Way Forward in Core Government Functions, OECD Publishing, Paris, https://doi.org/10.1787/795de142-en.
[12] OECD (2025), Survey on Digital Government 3.0.
[2] OECD (2024), “2023 OECD Digital Government Index: Results and key findings”, OECD Public Governance Policy Papers, No. 44, OECD Publishing, Paris, https://doi.org/10.1787/1a89ed5e-en.
[8] OECD (2024), Digital Government Survey of Korea - Public Institutions Edition.
[23] OECD (2024), G20 Compendium on Data Access and Sharing Across the Public Sector and with the Private Sector for Public Interest,, OECD Publishing, Paris, https://doi.org/10.1787/df1031a4-en.
[22] OECD (2024), G7 Compendium of Digital Government Services, OECD Publishing, Paris, https://doi.org/10.1787/69fbf288-en.
[15] OECD (2024), OECD fact-finding mission to Seoul and Sejong, Korea.
[31] OECD (2024), OECD Survey on Drivers of Trust in Public Institutions – 2024 Results: Building Trust in a Complex Policy Environment, OECD Publishing, Paris, https://doi.org/10.1787/9a20554b-en.
[21] OECD (2024), The Digital Transformation of Norway’s Public Sector, https://www.oecd.org/en/publications/the-digital-transformation-of-norway-s-public-sector_1620e542-en.html?.
[3] OECD (2023), 2023 OECD Open, Useful and Re-usable data (OURdata) Index: Results and key findings, OECD Publishing, Paris, https://doi.org/10.1787/a37f51c3-en.
[29] OECD (2022), Survey on Open Government Data 5.0.
[24] OECD (2021), Recommendation of the Council on Enhancing Access to and Sharing of Data, https://legalinstruments.oecd.org/en/instruments/OECD-LEGAL-0463.
[1] OECD (2019), Enhancing Access to and Sharing of Data: Reconciling Risks and Benefits for Data Re-use across Societies, OECD Publishing, Paris, https://doi.org/10.1787/276aaca8-en.
[7] OECD (2019), The Path to Becoming a Data-Driven Public Sector, OECD Publishing, Paris, https://doi.org/10.1787/059814a7-en.
[18] Office of Management and Budget (2019), M-19-23: Phase 1 Implementation of the Foundations for Evidence-Based Policymaking, https://www.whitehouse.gov/wp-content/uploads/2019/07/M-19-23.pdf.
[11] Personal Information Protection Commission (2023), “National MyData Innovation Promotion Strategy” announced to support data portability, https://www.pipc.go.kr/eng/user/ltn/new/noticeDetail.do (accessed on July 2025).