Spotlight on Korea

by Ropes & Gray LLP

Ropes & Gray LLP


Although historically U.S. regulators have not focused FCPA enforcement efforts in Korea to the same extent as other Asian jurisdictions such as China and India, multinational companies doing business in Korea, particularly in the life sciences space, should remain vigilant. In addition to the possibility of increased enforcement by U.S. regulators going forward, domestically, Korea has pursued an increasingly stringent and aggressive anti-corruption regime, marked by several high-profile enforcement actions as well as Korea’s implementation of an expansive new anti-corruption law, the Kim Young-ran Act, in September 2016.

In its latest effort to battle corruption and increase transparency, Korea implemented the Sunshine Act, which requires pharmaceutical and medical device companies to establish and maintain an expense reporting system to track economic benefits provided to healthcare professionals (“HCPs”) during a fiscal year. The obligation to implement the reporting system took effect on January 1, 2018, following adoption of the law in June 2017.

With the roll-out of the Sunshine Act marking a further uptick in Korea’s efforts to strengthen its anti-corruption efforts, companies operating in the life sciences space in Korea should take appropriate steps to ensure compliance with local requirements, such as localizing their compliance policies and programs.

The Sunshine Act

Under Korea’s Sunshine Act, pharmaceutical and medical device companies must collect and maintain records of economic benefits provided to HCPs, and prepare an aggregated expense report detailing the economic benefits provided during each fiscal year. Companies must generate aggregated expense reports within three months following the conclusion of its fiscal year, and retain expense reports for at least five years. Expense reports and relevant supporting documentation must be provided, if requested, to the Ministry of Health and Welfare (“MHW”), which may use such materials to investigate whether illegal kickbacks have been paid. There is no requirement that such reports be made public.

The MHW identified seven reporting categories: (1) samples; (2) clinical trials; (3) post-market surveillance; (4) product presentations to multiple medical institutions; (5) product presentations to a single medical institution; (6) academic conferences; and (7) price discounts. For product presentations, food, drinks, and souvenirs exceeding US$9 require reporting, while those under US$9 do not. However, no minimum threshold is required to trigger the reporting obligation for other economic benefits.

Regarding covered persons, companies must collect and keep records of economic benefits provided to a broad range of health care professionals, including physicians, pharmacists, dentists, traditional Korean medicine practitioners, nurses, midwives, founders of medical institutions, and individuals working with medical institutions for purposes of sales promotion.

Enforcement Trends

Signaling a continuing focus on domestic anti-corruption efforts, particularly in the life sciences industry, the Sunshine Act follows on the heels of several high-profile anti-corruption enforcement actions by Korean regulators. Such efforts include a US$48 million fine against Novartis International AG for allegedly bribing doctors to use its products in May 2017, and the criminal conviction of the top executive of one of the largest Korean companies.

It also follows the September 2016 implementation of the Kim Young-ran Act, which significantly expanded the scope of Korea’s anti-corruption laws, imposing requirements that exceed the scope of the FCPA. Specifically, the Kim Young-ran Act criminalized the provision of “benefits” to any “public official” exceeding KRW 1 million (about USD $900) in a single instance, or KRW 3 million (about $2,500) in aggregate over a one-year period, regardless of whether benefits are provided in exchange for any particular business favor or in connection with the public official’s duties. The Kim Young-ran Act also expanded the definition of public officials to cover a broader range of persons, including private educators and employees of state-owned enterprises, extended criminal liability to corporations for employee misconduct, and set caps on certain benefits offered for promotion of normal business and social relationships (KRW 30,000 (approximately US$25) for meals/drinks, KRW 50,000 (approximately US$41) for gifts, and KRW 100,000 (approximately US$82) for congratulatory or condolence payments at festive occasions and funerals).

While the Kim-Young-ran Act does not specifically target the pharmaceutical and medical device industry, it indicates that Korea is committed to eliminating corruption and improper payments. Korean regulators have long focused on potential corruption within the life sciences sector. In addition to the $US48mm fine levied against Novartis in May 2017, from 2007 to 2011, the Korea Fair Trade Commission (“KFTC”) took extensive enforcement actions against the pharmaceutical industry, including global companies, and imposed numerous fines for “rebate” incentives provided to HCPs such as cash payments, lecture fees, and overseas sponsorships, which were deemed to be illegal incentives for increased prescriptions. The KFTC, and other Korean regulators, continue to investigate pharmaceutical and medical device companies for illegal rebates, improper payments, and related potential violations.

Given Korea’s continued focus on rooting out improper payments and potential corruption, particularly in the life sciences sector, domestic enforcement actions are likely to increase.


To navigate through an increasingly difficult anti-corruption regime in Korea, pharmaceutical and medical device companies doing business in Korea should assess and update their policies, procedures, and internal controls to ensure they are localized to address Korean concerns, particularly with respect to travel, gifts and entertainment, and expense controls.

As part of this process, with respect to the Sunshine Act in particular, companies should ensure that their systems carefully and effectively track spend and other relevant data, and analyze their categories of spend and persons to which they provide economic benefits, to determine which expenditures and persons trigger a reporting obligation under the Sunshine Act. In addition, companies should ensure that they have robust internal controls in place, particularly with respect to the seven reportable categories of support for healthcare professionals, and the use of corporate credit cards in connection with such support. Finally, companies should provide training to appropriate personnel on the Sunshine Act, and monitor compliance on an ongoing basis.

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Ropes & Gray LLP | Attorney Advertising

Written by:

Ropes & Gray LLP

Ropes & Gray LLP on:

Readers' Choice 2017
Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up using*

Already signed up? Log in here

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
Privacy Policy (Updated: October 8, 2015):

JD Supra provides users with access to its legal industry publishing services (the "Service") through its website (the "Website") as well as through other sources. Our policies with regard to data collection and use of personal information of users of the Service, regardless of the manner in which users access the Service, and visitors to the Website are set forth in this statement ("Policy"). By using the Service, you signify your acceptance of this Policy.

Information Collection and Use by JD Supra

JD Supra collects users' names, companies, titles, e-mail address and industry. JD Supra also tracks the pages that users visit, logs IP addresses and aggregates non-personally identifiable user data and browser type. This data is gathered using cookies and other technologies.

The information and data collected is used to authenticate users and to send notifications relating to the Service, including email alerts to which users have subscribed; to manage the Service and Website, to improve the Service and to customize the user's experience. This information is also provided to the authors of the content to give them insight into their readership and help them to improve their content, so that it is most useful for our users.

JD Supra does not sell, rent or otherwise provide your details to third parties, other than to the authors of the content on JD Supra.

If you prefer not to enable cookies, you may change your browser settings to disable cookies; however, please note that rejecting cookies while visiting the Website may result in certain parts of the Website not operating correctly or as efficiently as if cookies were allowed.

Email Choice/Opt-out

Users who opt in to receive emails may choose to no longer receive e-mail updates and newsletters by selecting the "opt-out of future email" option in the email they receive from JD Supra or in their JD Supra account management screen.


JD Supra takes reasonable precautions to insure that user information is kept private. We restrict access to user information to those individuals who reasonably need access to perform their job functions, such as our third party email service, customer service personnel and technical staff. However, please note that no method of transmitting or storing data is completely secure and we cannot guarantee the security of user information. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time.

If you have reason to believe that your interaction with us is no longer secure, you must immediately notify us of the problem by contacting us at In the unlikely event that we believe that the security of your user information in our possession or control may have been compromised, we may seek to notify you of that development and, if so, will endeavor to do so as promptly as practicable under the circumstances.

Sharing and Disclosure of Information JD Supra Collects

Except as otherwise described in this privacy statement, JD Supra will not disclose personal information to any third party unless we believe that disclosure is necessary to: (1) comply with applicable laws; (2) respond to governmental inquiries or requests; (3) comply with valid legal process; (4) protect the rights, privacy, safety or property of JD Supra, users of the Service, Website visitors or the public; (5) permit us to pursue available remedies or limit the damages that we may sustain; and (6) enforce our Terms & Conditions of Use.

In the event there is a change in the corporate structure of JD Supra such as, but not limited to, merger, consolidation, sale, liquidation or transfer of substantial assets, JD Supra may, in its sole discretion, transfer, sell or assign information collected on and through the Service to one or more affiliated or unaffiliated third parties.

Links to Other Websites

This Website and the Service may contain links to other websites. The operator of such other websites may collect information about you, including through cookies or other technologies. If you are using the Service through the Website and link to another site, you will leave the Website and this Policy will not apply to your use of and activity on those other sites. We encourage you to read the legal notices posted on those sites, including their privacy policies. We shall have no responsibility or liability for your visitation to, and the data collection and use practices of, such other sites. This Policy applies solely to the information collected in connection with your use of this Website and does not apply to any practices conducted offline or in connection with any other websites.

Changes in Our Privacy Policy

We reserve the right to change this Policy at any time. Please refer to the date at the top of this page to determine when this Policy was last revised. Any changes to our privacy policy will become effective upon posting of the revised policy on the Website. By continuing to use the Service or Website following such changes, you will be deemed to have agreed to such changes. If you do not agree with the terms of this Policy, as it may be amended from time to time, in whole or part, please do not continue using the Service or the Website.

Contacting JD Supra

If you have any questions about this privacy statement, the practices of this site, your dealings with this Web site, or if you would like to change any of the information you have provided to us, please contact us at:

- hide
*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.