KR — ZDNet Korea

AI Is Starting to Sign Contracts for Us, but Is the Law Ready?

PolicyNovember 6, 20262 min read

This is an opinion piece from a Korean law firm's AI team. It asks whether Korea's laws are ready for 'agentic AI', which can plan and carry out purchases on a person's behalf.

AI that shops for you

Until recently, AI could only search for gifts or suggest options. Now, agentic AI can compare products, fill in an order, and pay. The article uses a simple example: a user asks AI to pick a good gift for their mother's birthday, under about 200,000 won. The authors ask who is responsible if the AI enters the wrong address, buys a non-refundable item, or orders extra things without permission.

Existing laws still apply

The authors say Korea does not need a brand-new law just for agentic AI. Current laws still cover many cases. The Civil Act decides whether a contract is valid and who must pay for damage. The Personal Information Protection Act protects personal data. The E-Commerce Act protects online shoppers. If a user asked the AI to buy something, the purchase may count as the user's own choice, even if the user never pressed the buy button. Korea's AI Basic Act, in force since January 22, adds duties such as transparency and human oversight for high-impact AI.

Key facts

The example budget is about 200,000 won.
Korea's AI Basic Act took effect on January 22.
The EU has its own AI Act, which sets rules based on risk level.
Agentic AI is described as acting through several steps without step-by-step instructions.

Why it matters

AI that shops and pays can cause real money losses and privacy problems. Old laws give a starting point, but they may not answer every question about limits, approval, and blame. The authors say that waiting until harm happens is not enough. Rules need to be set before problems grow.

What to watch

Clear limits on what users approve in advance, such as a set budget.
Human final approval for large payments or important contracts.
Records of what the AI did, and a way to stop it quickly.
Whether companies build safety features first, with laws only where consumers face serious harm.

Glossary

Agentic AI: AI that plans and takes actions for a person, such as ordering or paying, after getting instructions.
Civil Act: Korea's main law on contracts, rights, and payment for damages between private parties.
Personal Information Protection Act: Korean law that sets rules for collecting and protecting people's personal data.
E-Commerce Act: Korean law that protects consumers when they buy goods or services online.
AI Basic Act: Korea's law, in force since January 22, that sets duties for AI services, especially high-impact AI.
AI Act: The European Union's law that sets AI rules based on how much risk an AI system poses.

Same story, different eyes

The RegulatorAI

Agentic AI shows where existing law already works, and where it runs out

Through a policy lens, what I find interesting is that this isn't a story about a missing law.

Read the full take in the app →

The UserAI

Your AI assistant's spending limit may soon work like a card limit

For working people, the most practical takeaway is that existing law (civil, e-commerce, privacy) already gives a starting point, so you don't have to wait for a brand-new law to use an AI agent.

Read the full take in the app →

Study warns of water stress from new mega data centers in Germany

A Öko-Institut study commissioned by Greenpeace finds German data centers used about 13 billion liters of water for cooling in 2025, and could reach up to 27 billion liters a year by 2030 as new mega facilities are built. Bitkom, the industry association, had called water demand largely unproblematic, while the study's authors say direct water use can be cut to zero with dry or compression cooling. Greenpeace also criticizes poor transparency, noting that fewer than half of the roughly 1,200 reporting operators supplied data to authorities.

Policyheise onlineNov 6

End of Floppy Disks in US Aviation by 2028

The US Federal Aviation Administration has launched a new system to replace its legacy floppy-disk-based systems, which have been in operation for more than 40 years. Transportation Secretary Sean Duffy says the new Enterprise Information Display System (E-IDS) is set to replace four affected systems at 435 locations by the end of 2028. The modernization was driven by political pressure after several fatal aviation accidents, and Congress has reportedly approved $12.5 billion for it, with Duffy requesting another $30 billion.

PolicyTechCrunchNov 6

Meta, Google, and TikTok sue California AG over teen social media law

Meta, Google, and TikTok have each filed lawsuits against California Attorney General Rob Bonta to block AB 1709, a law signed by Governor Gavin Newsom that restricts autoplay videos and personalized feeds for users under 16 and is set to take effect at the start of the new year. The companies argue the law violates the First Amendment and that Section 230 preempts it, while digital safety groups such as the EFF warn that its age verification requirements could compromise privacy for all users.

PolicyZDNet KoreaNov 6

Shinsegae Names Lee Seok-goo as Head of Department Store Division, Concurrently CEO of Shinsegae DF

Shinsegae Group has appointed Lee Seok-goo, president, as head of its department store division, and he will also concurrently serve as CEO of Shinsegae DF. The company said on the 6th that the move aims to strengthen audit functions across the company and build a systematic management structure to bolster overall management soundness. Former division head Kim Sun-ho, a vice president, will take charge of the support headquarters.