language: en · source language: ko · status: in-force · last checked: 2026-09-06

South Korea — Framework Act on Education, Art. 23-3 (student-information principles)

The constitutional-style principles provision for student data in Korea's education framework act.

Statute text is Korean (the authentic language); this README is curation.

Applicability to EdTech

Purpose limitation by statute (제23조의3 제1항): student information such as school records may be collected, processed, used and managed only for educational purposes — a purpose-limitation rule sitting above PIPA for the school domain.
Parental access right (제2항): guardians are entitled to receive their child's student information.
No third-party provision without consent (제3항) except where a statute says otherwise — for minors, consent means the student and the guardian. A platform receiving Korean student data is a third party under this rule; the operational carve-outs live in 초·중등교육법 제30조의6.

Document	Covers
HAKSAENG-JEONGBO.md	제23조의3 in full

교육부 (Ministry of Education); privacy supervision by the PIPC under PIPA.