Who Else Sees Your Payroll File?

Your engagement letter names one firm. So does the invoice. Payslips arrive on time, filings are made by the deadline, and nothing goes wrong.

So how many organisations actually handle the work?

This is not a question about service quality. It is a question about how many companies currently hold a file containing every employee’s salary and resident registration number. In most cases the client does not know the answer, because nobody has asked.

For a foreign-invested company, the exposure is sharper. Headcount is small, and the payroll file of a thirty-person subsidiary is not a statistic. It is a list. One line is one person, and anyone who knows the organisation chart can read straight off who earns what.

It also holds figures only a handful of people inside the Korean entity are meant to see: the representative director’s remuneration, and the assignees’. Those are usually tied to headquarters compensation policy, so a single Korean payroll file can expose the parent’s own benchmarks.

And foreign-invested companies rarely keep a dedicated HR function in Korea. Payroll is outsourced in full, and the provider is the only control point there is. If that provider passes the file to someone else, the control ends there.

“Payroll” contains filings of different kinds

Running payroll in Korea is not one calculation repeated twelve times. Once the numbers are settled, different filings go to different authorities.

Withholding tax goes to the National Tax Service. National Health Insurance and National Pension go to their respective services. Employment and Industrial Accident insurance go to the Korea Workers’ Compensation and Welfare Service. Different portals, different submission routes, and for each of them a separate rule about who is permitted to file.

That is the point worth holding on to. Anyone can calculate payroll; a spreadsheet will do. The restriction sits at the submission step. For one organisation to handle all of it directly, it has to hold every one of those permissions.

An organisation without them can still sell payroll services. It simply cannot complete the filing in its own name.

Which leaves two options

One. The file is passed to a firm that does hold the permission, and that firm submits the filing. The client never engaged them and usually cannot name them.

Two. The provider uses the client’s own certificate and credentials and submits as the client. On paper, the filer is still the client.

There is no third option. And either way, it is not the arrangement the client had in mind when they signed with one company.

The cost is the same either way

It is worth recalling what a payroll file actually is.

It holds every salary in the company, the directors’ included. Resident registration numbers, bank accounts, dependants, who claims a disability deduction, what is deducted from whose pay. It is among the most sensitive records a company keeps.

Three things compound.

It cannot be masked once you go live. During vendor selection you can hand over a de-identified sample. In operation, social insurance enrolment needs the actual resident registration number and the year-end settlement needs the actual dependant details. The option to mask disappears.

It is a party you never contracted with. There is no confidentiality agreement with the second company, no security review, no notification route if something goes wrong. Where the data sits, how many people can open it, when it is destroyed after termination — none of it is agreed, because agreeing it would first require knowing that the company exists.

You cannot count the copies. There is no way to establish how far the file travelled, how many copies remain, or who opened them. If something goes wrong, employees ask your company. The second company’s name is what you hear for the first time that day.

Using separate specialists is not a fault in itself — provided you chose them. Clear handoffs solve the coordination problem. They do not reduce the number of hands.

Two questions settle it

If you engaged Company A, it is natural to assume the filings also go out in Company A’s name. You outsourced the work, so you expect the name of the firm that did it to be on the record.

Confirming that is simple. Ask. But ask about both.

• Under which company’s name is our withholding tax return filed?
• Under which company’s name are our social insurance filings made?

Ask about one and you get half an answer. Withholding tax requires one kind of professional authority; social insurance requires another. Few organisations can do both in their own name. Ask about one side only and a provider can answer truthfully about the part it handles and simply not mention the rest. No untruth is required.

So take both names together. The answer comes back as one of three.

Both names are the firm you engaged. That is what you expected. The provider files under its own name and authority, and responsibility for the filing sits somewhere identifiable.

One or both names belong to another company. A company that is not in your contract is handling your payroll data. What it receives, where it keeps it, and when it destroys it are undefined, because you have never agreed anything with it.

The filings go out in your own name. You are paying for outsourced payroll, and on the record there is no one who performed it. If a question arises later, it is your company’s own filing.

Put the question in writing and keep the answer in writing. None of the three is wrong in itself. But you should know which one it is.

If a third name comes back

• What does that company receive — the full file, or part of it?
• Is there a confidentiality agreement between you and them, and may we see its terms?
• If there is an incident at that company, who notifies us, and within how many days?
• If you change that company in future, will we be told in advance?

Where we fit

Korea Payroll Partners operates within an accounting firm. Payroll calculation, withholding tax filings, social insurance filings and year-end tax settlement are handled inside one organisation. We do not send client data to an outside office in order to complete a filing.

That is less a feature than the absence of any reason for the data to travel. There is one copy of your payroll file, and you know where it is.

Before you sign, or before the next renewal

If you are comparing payroll proposals, or you are already engaged and have never asked the two questions above, they are worth asking now rather than after an incident.

Send us the proposed scope, or simply tell us which responsibilities are unclear. No employee payroll data is required for an initial review.

General information as of September 8, 2026. This is not tax, legal or data protection advice. Arrangements differ between providers, and what is appropriate for any company depends on its own facts and contracts. Take advice on your own circumstances before changing a payroll or vendor arrangement.

Payroll Compliance · Withholding Tax · Social Insurance · Foreign Employees