In a sweeping move to tighten its grip on the digital realm, North Korea has unveiled a dramatically enhanced information control system through its revised Information Technology Law, signaling the regime’s determination to maintain absolute authority over its technological development.
Daily NK has obtained the complete text of North Korea’s Information Technology Law, which was amended in 2022.
The law consists of 5 chapters and 43 articles, covering the fundamentals of information technology regulation, planning, implementation, strengthening material and technical infrastructure, and government oversight of information technology projects.
According to the law, all institutions, enterprises, and organizations must prepare and submit information technology plans for approval by state planning agencies, register with the information technology guidance agency, and provide reports on implementation status.
Additionally, these entities must implement information technology according to standardized specifications and build information infrastructure, systems, and databases in accordance with approved design documents, followed by mandatory operational inspections.
Through these measures, North Korea has established an institutional framework to control all aspects of information technology, from planning and implementation to operations.
Hwang Hyun-wook, a senior researcher at the Daily NK AND Center, explained, “The revised law aims to increase administrative and economic efficiency through information technology, creating a more scientific and convenient environment for implementing national policies and business management. It establishes a legal foundation that emphasizes standardization and strengthens the technical infrastructure for information systems.”
The revised law places particular emphasis on information security and technological self-reliance.
Article 19 stipulates that all information systems must establish security measures according to state standards and undergo mandatory review and registration. Article 24 specifies requirements for responsible management of information resources.
“The law designates information security as an essential element in implementing information technology and mandates security reviews for all systems,” Hwang said. “This can be viewed as an extension of the regime’s security policies.”
Article 27 requires that information technology equipment and software be produced according to state plans, emphasizing the development of “our style of information technology” to increase domestic production in the IT sector.
These regulations appear to be part of North Korea’s strategy to build an independent information technology ecosystem amid international sanctions, highlighting the regime’s prioritization of control over technological openness.
“The law aims to increase self-sufficiency by developing indigenous technology,” Hwang noted. “The key objective is reducing dependence on external technology and building an independent IT foundation.”
Hwang added, “While the law emphasizes investment in IT projects (Article 33) and the creation of an IT fund (Article 34), it’s uncertain whether North Korea can sustain these initiatives given its economic challenges. In the long term, these ambitious IT projects may further burden the North Korean economy.”
The revised law also includes more detailed punishment provisions for violations.
Article 42 outlines various infractions—including failure to meet IT plans, false reporting, unauthorized system operation, and security review omissions—that can result in warnings, unpaid labor for up to three months, labor education, demotion, dismissal, or removal from office.
Article 43 further stipulates that certain violations may result in criminal charges under the relevant provisions of the Criminal Law.
A full version of the law in Korean can be downloaded here.
Read in Korean
#Digital #iron #curtain #Koreas #revamped #information #technology #law
