Indonesia is a signatory of the World Trade Organization (WTO) Information Technology Agreement (ITA) of 1996, but is not a signatory of its 2015 expansion (ITA II).

Art. 10 of Regulation No. 02/M-IND/PER/1/2014 provides that domestic service suppliers need to be prioritised. To qualify as a domestic service provider, a majority of the shares must be owned by an Indonesian citizen, and two-thirds of the board members must be local. If no domestic service suppliers are participating in the procurement, national service suppliers (with at least 10% of shares belonging to Indonesians) will be taken into consideration. Only when these are also unavailable will foreign service providers be allowed to participate in the procurement process as well (Art. 16.1).

Under Art. 63 of Presidential Regulation No. 16/2018, an International Tender may be conducted if no capable or eligible domestic Economic Operator is available, and:
- The estimated value of goods and other services exceeds Rp 50 billion (approx. USD 4.5 million), or
- The estimated value of consulting services exceeds Rp 25 billion (approx. USD 2.25 million).
Additionally, foreign business entities selected through an International Tender must collaborate with national business entities via a consortium, subcontract, or other forms of cooperation.

Art. 66 of Presidential Regulation No. 16/2018 provides that the ministries, institutions and regional apparatuses are obligated to use domestic products. Procurement of imported goods may be conducted in the event that the goods cannot be produced domestically or that domestic production volume is unable to meet the demand.

Art. 9 of the Government Regulation No. 71/2019 requires that providers of bespoke software must provide or escrow the source codes associated with their service. The requirement applies to Electronic System Providers for public scope. This requirement was already contained in Art. 8 of Government Regulation No. 82/2012, which was repealed by Government Regulation No. 71/2019.

The Act on Consumer Protection in Electronic Commerce Transactions provides a comprehensive framework for consumer protection that also applies to online transactions.

Korea has signed but not ratified the United Nations (UN) Convention on the Use of Electronic Communications in International Contracts.

Korea has adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce.

Korea has not adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Signatures.

According to Art. 9 of the Notice of Import Customs Clearance for Express Goods, as amended in 2016 to increase the value of the de minimis rule, the de minimis threshold, meaning the minimum value of goods below which customs do not charge duties, is USD 150, which is below the 200 USD threshold recommended by the International Chamber of Commerce (ICC). This threshold applies to goods for personal consumption and samples not exceeding USD 150, with an exception for trade with the U.S. and Puerto Rico, where the threshold is USD 200 as per the Korea-US FTA, allowing these goods to be exempt from taxes and duties collected by customs.

According to Art. 4 of the Domain Name Management Rules set forth by the Korea Internet & Security Agency (KISA), domain name registrants must have a postal address of their place of residence in Korea. In addition, it is reported that a Copy of Company registration in Korea with proof of company address in both English and Korean languages is required for registration and that a Korean-based administrative contact is mandatory.

Under Art. 31-2.1 of Personal Information Protection Act, a data handler without an address or business office in Korea must designate a local representative in writing if they meet certain criteria, such as revenue thresholds and the volume of personal data retained.

According to Art. 32 of the Act on Promotion of Information and Communications Network Utilization and Information Protection, foreign IT service providers without an office in Korea are required to appoint a local agent responsible for ensuring compliance with data privacy regulations.

Art. 11 of the "Act on the Prevention of Divulgence and Protection of Industrial Technology" provides that when a target institution holding national core technology developed with government research and development subsidies intends to export such technology to a foreign enterprise or any other external entity, whether through sale, transfer or another means, it must obtain prior approval from the Minister of Trade, Industry and Energy. In reviewing an application for approval, the Minister may grant approval after assessing the potential effects of the export on national security, the national economy and other relevant interests, consulting with the head of the competent central governmental administrative authority, and obtaining deliberation by the Committee. Where a target institution holding and managing national core technology that is not subject to this approval requirement seeks to export such technology, it must submit a prior report to the Minister of Trade, Industry and Energy. Upon receiving this report, the Minister shall examine the likely impact of the proposed export on national security and any other pertinent factors, and shall accept the report if the export is deemed not to pose a serious risk to national security and to comply with the Act. The term national core technology refers to technology designated under Art. 9, the overseas divulgence of which could have a materially adverse effect on national security or on the development of the national economy, owing to its significant technological and economic value in domestic and international markets or its capacity to generate substantial growth in related industries.

Since 2008, the Foreign Trade Act has required a license prior to the export of strategic goods. These items include dual-use items. Among them, electronics (category 3), computers (category 4), telecommunications and information security (category 5), and sensors and lasers (category 6) are relevant to digital goods. These categories are controlled by the Ministry of Trade, Investment, and Energy.