📌 목차 (Table of Contents)

Most foreign medical and healthcare companies planning a Korean launch start the same way they’d approach any regulated market: figure out the product — a device, a clinic model, a digital health platform, a clinician placement — and treat Korean regulatory approval as a compliance step that follows once the business plan is set. Only once that plan is underway do most companies discover that Korea’s healthcare regulation isn’t one gate but several separate ones — hospital ownership, medical device classification, physician licensure, telemedicine scope, and patient data handling — each administered under a different statute, on a different timeline, and each capable of blocking the business model outright rather than just adding paperwork.

Korea regulates healthcare market entry through the Medical Service Act (의료법), which restricts who may own and operate a hospital; the Medical Device Act (의료기기법), which classifies and licenses devices before they can be imported or sold; the national licensing exam system administered through the Ministry of Health and Welfare and the Korea Health Personnel Licensing Examination Institute, which governs whether a foreign-trained physician may practice; and the Personal Information Protection Act, which treats health information as a specially protected category. A foreign healthcare company that treats these as one bundled “get licensed” step tends to discover, late, that each one runs on its own clock and its own rules.

Table of Contents

Korea Regulates the Facility and the Practitioner, Not Just the Company

Five Separate Gates, Not One

A Korean corporate registration certificate says a company exists. It says nothing about whether that company may own a hospital, sell a medical device, employ a foreign physician, offer remote consultations, or process a patient’s health records. Each of those is governed by its own statute, its own regulator, and — critically — its own eligibility rule that doesn’t bend just because the underlying company is properly incorporated and well capitalized.

Why Foreign Healthcare Companies Get the Sequence Wrong

The trap is assuming that because the business model works in the home jurisdiction — a for-profit hospital chain, a device already CE-marked or FDA-cleared, a telehealth platform already operating elsewhere in Asia — Korean regulators will evaluate it as a licensing formality rather than a structural fit question. Some of what follows isn’t a matter of assembling the right documents faster; it’s a matter of whether Korean law permits the business model at all, in which case no amount of preparation changes the answer.

Hospital Ownership: Why “For-Profit Hospital” Mostly Doesn’t Work in Korea

Ownership Is Restricted to Non-Profit Structures

Under the Medical Service Act, a hospital in Korea generally has to be established and operated by a physician, a medical corporation (의료법인), a non-profit foundation, a school corporation, a consumer cooperative, or a local government — not by an ordinary for-profit company, foreign or domestic. This isn’t a licensing hurdle to clear; it’s a structural restriction on who is eligible to hold the hospital license in the first place, and an ordinary foreign investment vehicle doesn’t qualify on its own.

The Free Economic Zone and Jeju Exception

Korea carved out a narrow exception allowing foreign-invested, investment-open hospitals (투자개방형 외국병원) within Free Economic Zones and Jeju Special Self-Governing Province, intended to let foreign healthcare investors establish for-profit-structured hospitals serving foreign and, in some models, domestic patients. On paper, this is Korea’s answer to “can a foreign company actually own a Korean hospital.”

The Cautionary Case: Greenland International Hospital

The practical track record of that exception is a genuine caution rather than a green light. Jeju approved Greenland International Hospital (녹지국제병원) — a Chinese-invested, for-profit hospital — in 2015, but conditioned the license on treating foreign patients only, excluding Korean nationals. That restriction made the business case unworkable for the operator; the hospital never opened, Jeju revoked the license in 2018 for failing to commence operations within the required window, and multi-year litigation followed. As of 2026, the property has changed hands multiple times and is now run by a Korean non-profit hospital operator under an entirely different, conventional non-profit model. A foreign company evaluating the FEZ/Jeju for-profit hospital route should treat this history as the realistic baseline, not the exceptional outcome.

What Usually Works Instead

Foreign healthcare companies that do establish a durable Korean presence around hospital-level care more commonly do so through a non-profit medical corporation structure, a partnership or management contract with an existing Korean medical corporation, or a device, technology, or services relationship that doesn’t require owning the hospital license itself.

Medical Devices: Classification, KGMP, and the Licensing Path

Korea’s Four-Tier Classification System

The Medical Device Act classifies every device into one of four risk-based classes, and the classification determines both the review pathway and the timeline. Class 1 devices (wheelchairs, stethoscopes) require only notification. Class 2 devices (blood pressure monitors, thermometers) require certification, generally reviewed by a designated third-party certification body rather than the Ministry of Food and Drug Safety (MFDS) directly. Class 3 devices (artificial heart valves, joint implants) require MFDS approval. Class 4 devices — pacemakers, coronary stents — require approval directly from MFDS headquarters, with the most demanding review.

KGMP Certification Runs in Parallel

Beyond product classification, manufacturers generally need Korean Good Manufacturing Practice (KGMP) certification for the manufacturing facility itself, obtained through one of several designated quality-review bodies — including KTL, KTC, KCL, KTR, and affiliated bodies such as TÜV. A foreign manufacturer that already holds Medical Device Single Audit Program (MDSAP) certification can generally use it as a substitute for an in-person Korean audit of the overseas manufacturing site — a meaningful timeline advantage worth confirming early.

Timelines Scale With Risk Class

Review timelines scale with classification — Class 1 notification is fast, while Class 3 and Class 4 approvals involve substantially longer technical review. A foreign manufacturer should re-derive the Korean timeline independently rather than assuming it matches approval speed in another jurisdiction.

Foreign Doctors: The Licensure Path Has Its Own Bottleneck

Recognized Schools, Then a Preliminary Exam, Then the National Exam

A foreign-trained physician who wants to practice in Korea can’t simply present an overseas medical license. The applicant’s medical school has to appear on the Ministry of Health and Welfare’s list of recognized foreign institutions — currently covering roughly 159 universities across 38 countries — after which the applicant sits a preliminary exam (예비시험), required specifically for physicians, dentists, and pharmacists, before becoming eligible to sit Korea’s national licensing exam (국가고시) administered by the Korea Health Personnel Licensing Examination Institute.

The Preliminary Exam Is a Real Filter, Not a Formality

Reporting on recent cycles has noted pass rates around half for foreign medical school graduates sitting the preliminary exam, reflecting both the exam’s difficulty and the gap between foreign medical curricula and Korea’s own. A healthcare company should treat this licensure process as a genuine, multi-stage recruiting and timeline risk.

What This Means for Staffing Plans

For companies whose Korean operations depend on clinical staff, the more predictable path is generally to recruit Korean-licensed physicians directly, or to plan the foreign-physician credentialing process as a long-lead-time track that starts well before the target opening date.

Telemedicine Is Being Legalized — But Narrowly, and Not Yet

The December 2025 Amendment, Effective December 2026

After roughly fifteen years of pilot programs and stopgap emergency rules, Korea’s National Assembly passed a Medical Act amendment on December 2, 2025 that formally legalizes telemedicine (비대면진료) and electronic prescriptions (전자처방전), taking effect one year after proclamation — currently expected around December 24, 2026. Until that effective date, telemedicine continues under the existing, more permissive pilot-program rules, which matters for anyone timing a launch.

The Legalized Framework Is Narrower Than the Pilot Program

The permanent framework is structured around follow-up patients at clinic-level institutions (의원급), not hospitals, and not first-time patients generally. Limited exceptions allow first-visit telemedicine for rare disease patients, chronic disease patients (Type 1 diabetes and similar), post-surgical follow-up patients, incarcerated individuals, and residents of islands or remote areas. Hospital-level institutions get only exceptional authorization, and dedicated telemedicine-only providers — platforms with no physical clinic behind them — are not permitted to operate as the treating institution.

Prescriptions and Medication Delivery Are Separately Restricted

Home delivery of medication is limited to five specific patient categories — island and remote-area residents, seniors aged 65+ receiving long-term care, registered persons with disabilities, confirmed Class 1–2 infectious disease patients, and rare disease patients. Narcotic medications cannot be prescribed through telemedicine at all, and first-visit exception cases face additional restrictions on medication type and duration.

What This Means for Planning

A foreign digital health company building around a broad, direct-to-consumer telemedicine model — particularly first-visit consultations or a platform-only structure — should plan around the narrower legalized framework, not the more permissive pilot rules currently in effect.

Health Data Is Sensitive Information Under Korean Privacy Law

Health Information Triggers Separate, Heightened Consent

Under Article 23 of the Personal Information Protection Act, health information (건강에 관한 정보) is classified as sensitive information (민감정보), alongside categories like sexual life and genetic information. Processing it generally requires separate, explicit consent from the data subject — distinct from consent for ordinary personal information — except where a specific law affirmatively authorizes the processing without it.

Security Obligations Go Beyond Ordinary Personal Data

Handling sensitive health information also triggers heightened security-safeguard obligations under Article 29 of the Act. Genetic information carries additional, more restrictive handling rules on top of the general sensitive-information regime.

What This Means for a Digital Health or Device Company

A foreign company building a Korean product around patient data needs a separate, explicit consent flow for health data specifically — not a blanket consent screen borrowed from a jurisdiction with a less granular sensitive-data category — and needs to confirm its security architecture actually satisfies Korea’s Article 29 standard.

Practical Sequencing for Market Entry

Most of the friction foreign medical and healthcare companies run into in Korea comes from assuming one regulatory track covers the whole business, when the business actually depends on several separate, independently gating approvals. A sequence that tends to work:

  1. Confirm which of the five gates your specific business model actually needs — hospital ownership, device licensing, physician staffing, telemedicine delivery, or health-data processing — since most healthcare businesses trigger more than one, and each runs on its own eligibility rule and timeline.
  2. If the model involves owning or operating a hospital, verify the ownership structure is eligible before assuming a Free Economic Zone or Jeju workaround solves it, given the Greenland International Hospital precedent — the legal pathway exists, but the practical track record counsels real caution about the for-profit hospital model specifically.
  3. If the model involves a medical device, classify it under Korea’s four-tier system early and confirm whether existing MDSAP certification can substitute for an on-site KGMP audit, since the classification — not the product’s approval status abroad — determines the Korean review timeline.
  4. If the model depends on foreign-trained physicians, start the school-recognition and preliminary-exam process as a long-lead-time track, given real failure rates at the preliminary exam stage, rather than treating physician licensure as a formality that follows the hire.
  5. If the model includes telemedicine, build around the narrower framework taking effect around December 2026, not the current pilot-program rules, particularly if the business depends on first-visit consultations, hospital-level care, or a platform-only structure.
  6. Build a separate, explicit consent flow for health data from the outset, since Korean privacy law treats it as sensitive information requiring its own consent and its own heightened security safeguards.