Summary

  • Korea does not hold .kr under a permit, licence or concession with a stated term. Article 2(3) of Act No. 21500 places the Korea Internet & Security Agency (KISA) inside the definition of an internet address management organisation, Article 9-2 creates the Korea Network Information Center inside the agency, and no inspected provision attaches a term, renewal cycle or designation-revocation power to either.
  • Article 9 makes KISA — not a minister — the entrusting party, dividing management duties by internet address and requiring the Minister of Science and ICT's approval. The reviewed record holds no executed .kr entrustment stating an approval number, date, recipient, scope, duration or conditions.

Denmark's .dk administrator works under a permit whose term a minister extends by dated order, and Kenya's .ke operator holds an individual licence with a stated duration. Korea's .kr belongs to neither family, and the difference is practical rather than decorative. There is no anniversary to watch and no instrument that returns to a ministry on a calendar, so there is no scheduled moment at which a registrant, a registrar or a creditor can expect the arrangement to be re-examined in public.

What the Act does instead is settle the institution in one article, then gate each handover in another. Different machinery, different question.

Status settled by definition

Article 9, as displayed at its article-specific endpoint under the version header for Act No. 21500 — promulgated 31 March 2026, effective 1 October 2026 — provides that the Agency may entrust the duties of an internet address management organisation, divided by internet address, to corporations and organisations prescribed by Presidential Decree after obtaining approval from the Minister of Science and ICT (Article 9). It names no internet address, no recipient organisation, no entrustment date, no duration and no contractual conditions. That header is legislative metadata; it is not an approval date for anything.

Article 2(3) does the structural work. As displayed, it defines an internet address management organisation as including the Agency and the corporations and organisations entrusted by the Agency with internet address management duties (Article 2). KISA's place in the category therefore does not depend on a ministerial designation decision: the text supplies the membership directly, so there is no appointment to look up. Article 2(6) separately defines proxy managers selected under Article 14(1), a category distinct from the management organisation.

The centre lives inside the agency

Article 9-2 is where the operational body appears. On the publisher's Korean statutory page it establishes the Korea Network Information Center within the Agency to promote the development and use of internet address resources and to build a stable management system, leaving the necessary details to Presidential Decree (Article 9-2). The page carries Act No. 18736, promulgated 11 January 2022 and effective 12 July 2022, and marks the article as added on that January date.

That is an internal statutory centre. It is not an individual decision entrusting an internet address to a separate legal person, and it states no institutional term.

One boundary has to stay visible. The search index exposes Article 9-2 under the 2026 consolidation with wording matching the separately retrieved 2022 Korean text, but opening the 2026 document returned the legislative interface and version heading without the operative article body. The 2026 wording of Article 9-2 was therefore not inspected as an original passage, and the 2022 consolidation is not presented here as the 2026 one (2026 consolidation). The Korea Legislation Research Institute translation keeps the internal-centre provision, and its amendment history stops at Act No. 18736; it is not a translation of Act No. 21500 (English translation).

Two approvals that are not one

The Act keeps them apart, and the distinction matters to anyone auditing Korean registry authority. Article 6, as displayed in that translation, lists approval of entrustments under Article 9 and approval of management rules under Article 13 as separate committee matters. Article 13 requires approval of management rules and their amendments, including provisions on database handover where an Article 9 entrustment occurs, and obliges management organisations to follow those rules.

Article 13 also supplies the word that invites misreading. Its first paragraph, item 4, concerns the suspension or abolition of the use of internet addresses or revocation of registration thereof — the object is an address or a registration, not an organisation's standing. Nowhere in the inspected text does a clause cancel an agency. The only three-year term in the articles reviewed belongs to dispute-resolution committee members under Article 16(4); nothing inspected attaches a term to KISA or to the centre.

So the recurring review point is the Article 9 approval, and it recurs per address rather than per term. A regime built that way is not weaker by construction. It is simply auditable somewhere else: at the entrustment decision instead of at a renewal file.

Who may be entrusted, and what the decree hands the centre

The Enforcement Decree narrows the pool. Article 10, as displayed in the Institute's translation of Presidential Decree No. 32784, lists four classes for the purposes of Article 9: the National Information Society Agency; university-affiliated institutions; information-and-communications-related government-funded research institutions; and operators owning line facilities (Decree Article 10). An eligibility list is not a record of completed entrustments.

Article 10-2, in the publisher's Korean text, assigns ten functions to the Korea Network Information Center under Article 9-2(1), among them stable management and operation of internet-address infrastructure such as the national domain name system, allocation and registration of addresses with management of management agents, and statistics (Decree Article 10-2). The page connects those functions expressly to the internal centre, not to an Article 9 recipient. Neither article names a country-code top-level domain as the subject of an executed entrustment, states an institutional expiry, or supplies a designation-cancellation mechanism. Article 14, also in the Korean text, provides separately for management organisations to select proxy managers.

What the root zone can and cannot establish

IANA's delegation record names the Agency as manager of .kr, shows an active delegation, names the Korea Network Information Center as the administrative contact's organisation and KISA as the technical contact's organisation, and displays a last-updated date of 16 September 2026 (.kr delegation record). That date is not identified as a Korean approval date or as the start of a term. A root-zone record says who answers for a code; it carries no grant, no service level and no contract.

The documents that do name .kr

The published rulebook for the code is real and auditable. The Domain Name Management Rules identify Article 13 of the Act as their legal basis in Article 1, and Article 3 states that they apply to domain-name management work under the Republic of Korea's country codes, kr and 한국 (Domain Name Management Rules). The displayed amendment history reaches 1 July 2026, with a commencement clause naming that date. Rule commencement is not Article 9 approval.

The 2019 amendment is the one with a visible approval trail. Its displayed commencement clause ties effectiveness to ministerial approval and specifies implementation stages of 1 December 2019 and 1 April 2020 for numeric-domain registration. A KISA release dated 31 March 2020 credits the 29 August 2019 amendment, gives .kr examples, and announces general registration from 1 April 2020 at 10:00 on a first-come basis (KISA release). Yonhap reported on 29 August 2019 that the Ministry of Science and ICT announced it had approved that amendment to permit numeric second-level domains (Yonhap).

Both records concern registration policy. Neither entrusts a registry, and the decision document behind that approval was not retrieved.

The historical file is a different institution

An official Ministry of Government Legislation explanatory article on the 2004 framework describes the former Korea Network Information Center as a non-profit foundation under civil law performing entrusted public functions, cites former Enforcement Decree Article 17-2 of the Framework Act on the Promotion of Informatization, and lists .kr registration management among its functions (2004 explanatory article). It reproduces no approval letter or agreement, and its civil-law foundation must not be carried forward onto today's internal statutory centre. The two arrangements share a name and little else.

The approval that is not in the reviewed record

No executed entrustment under Article 9 naming .kr — with an identifiable approval number, approval date, recipient, scope, duration or conditions — was located in the documents reviewed for this article (Article 9). That is an absence in the reviewed record, not proof that no such instrument exists. The distinction carries the piece: an approval gate nobody outside the ministry can read is still a gate, and the question a registrant should ask is whether the decision behind it is published anywhere.

Two leads sit beside that gap without filling it. A notice dated 15 April 2026 titled as the results of the 62nd Internet Address Policy Committee meeting names an attached minutes file; the attachment could not be retrieved, so no decision, approval or entrustment is inferred from the notice (committee notice). And a Korean research-report extraction describes a designation-cancellation provision at Article 13, which conflicts with the standing-rules provision inspected in the publisher's statutory text; the extraction could not be visually verified and is treated as conflicting rather than as operative law.

One absence deserves a flat sentence. No fee, price, registration volume, service-level percentage or incident count appears in the statutory, decree, rulebook, delegation or press documents reviewed here. Nobody should read a number into that space; the reviewed record contains none.

What a reader can actually audit

Whether .kr is operated directly by KISA through the internal centre, or under an external Article 9 entrustment whose instrument is unpublished, is not established by the reviewed record. Two facts survive that uncertainty. KISA's standing does not run on a clock, so no renewal date will ever arrive as the moment to raise a question. And the review point that does exist is an approval — the document a reader would need in order to know what was entrusted, to whom, for how long and on what conditions.

Korea's model is not less accountable for lacking a term. It is accountable where the reviewed record leaves the light off, and that is the harder problem: an expiring permit manufactures an occasion for scrutiny, while a statutory status manufactures only a filing.