‘Privacy by design’의 도입과 그 적용에 관한 소고
A Study on the Introduction and Application of Privacy by design
0
조회
0
다운로드
10
인용
0
참고문헌
키워드
초록
우리나라는 제4차 산업혁명 시대를 맞이함에 따라 급격한 정보통신기술의 변화를 겪고 있다. 무엇보다 인공지능기술과 데이터 활용기술이 융합되어 고차원적인 정보처리를 하는 지능정보기술이 핵심적인 요소가 되었으며, 지능정보기술의 발전을 위하여 빅데이터가 큰 역할을 하고 있다. 빅데이터 활용을 위한 대규모의 방대한 개인정보 수집은 모바일 기기, 사물인터넷, 각종 센서 등을 통한 다양한 방식의 네트워크 접속을 통하여 제한 없이 이루어지고, 강화된 데이터 분석 기술을 통한 개인 식별로 인하여 정보주체의 개인정보에 대한 통제가 더욱 어려워짐에 따라 사생활 침해 문제가 가속화되고 있다. 이제는 정보통신기술의 급격한 변화를 고려하여, 지능정보사회에서 가속화되는 개인정보 및 사생활 침해 문제에 대응할 수 있는 새로운 보호 패러다임을 논의해야 할 시점이다. ‘Privacy by design’은 개인정보를 처리하는 정보기술 및 관련 시스템의 설계 단계, 상품 및 서비스의 기획 단계에서부터 프라이버시의 보호 및 강화를 위한 조치를 마련하는 광범위한 과정을 의미하는 것으로, 개인정보 및 사생활 침해의 위험을 최소화하고 개인정보의 처리와 관련하여 소비자와 신뢰를 쌓을 수 있는 필수적 도구이다. 그러므로 우리나라의 “개인정보보호법” 체계 내에서 ‘Privacy by design’의 이행을 의무화하여 사전에 개인정보 및 사생활 침해를 예방할 수 있도록 노력해야한다.
Abstract
We have been experiencing the rapid change of Information and Communication Technology while facing the Fourth Industrial Revolution. Intelligence Information Technology, which processes data at high level by combining artificial intelligence technique with the use of data, is a critical element in the Fourth Industrial Revolution. Big data plays an important role for the development of Intelligence Information Technology. A variety of personal information for the use of big data are collected through various mobile devices, Internet of Things and different sensors and data analytics technologies identify individuals in large datasets. Because of that, it becomes more difficult for the owner of personal information to control their personal information and the infringement of privacy happens more than ever before. It’s time to discuss a new paradigm to be able to deal with that. Privacy by design is a wide process of establishment of privacy measures from design for products, services, information technologies and systems involved. It is an important tool which can minimize the dangers for the infringement of personal information and privacy and build trust and credibility with customers. Therefore, we should make an effort to prevent the infringement of personal information and privacy by necessarily implementing the principles of Privacy by design.
참고문헌 (27)
- 관계부처 합동, "제4차 산업혁명에 대응한 「지능정보사회 중장기 중합대책(안)」", ~ (2016)
- 김나루, "빅데이터 활용과 개인정보보호체계의 재구축을 위한 헌법적 고찰", 박사, pp.2017
- 최혜선, "개인정보보호의 신경향 －프라이버시 중심 디자인(Privacy by Design)을 중심으로－", 일감법학, (24), pp.305~340 (2013), 법학연구소
- 행정자치부, "개인정보 비식별화에 대한 적정성 자율평가 안내서", ~ (2014)
- Alan Hedley, "Privacy as a Factor in Residential Buildings and Site Development - An Annotated Bibliography", Bibliography, 32 (1966), National Research Council of Canada
- Ann Cavoukian, "Operationalizing Privacy by Design: A Guide to Implementing Strong Privacy Practices", Information and Privacy Commissioner, ~ (2012)
- Ann Cavoukian, "Remote home health care technologies: how to ensure privacy?", Build it in: Privacy by Design, Identity in the Information Society, 3(2) (2010)
- Ann Cavoukian, "Embedding Privacy Into What’s Next:Privacy by Design for the Internet of Things", Privacy & Big Data Institute, ~ (2016)
- Ann Cavoukian, "Privacy by Design in the Age of Big Data", Information and Privacy Commissioner, ~ (2012)
- Ann Cavoukian, "Dispelling the Myths surrounding De-identification: Anonymization Remains a Strong Tool for Protecting Privacy, Information & Privacy Commissioner of Ontario", ~ (2011)
- Ann Cavoukian, "SmartPrivacy for the Smart Grid:embedding privacy into the design of electricity conservation", Identity in the Information Society, 3(2) (2010), Springer
- Anna Romanou, "The necessity of the implementation of Privacy by Design in sectors where data protection concerns arise", Computer Law & Security Review, 2017 (2017)[DOI]
- The Final European Union General Data Protection Regulation, BNA Privacy & Security Law Report, "C. Burton", Bloomberg BNA(The Bureau of National Affairs), ~ (2016)
- David Krebs, "Privacy by Design: Nice-to-have or a Necessary Principle of Data Protection Law?", Journal of Intellectual Property, Information Technology and E-Commerce Law(JIPITEC), 4 (2013), Deutsche Gesellschaft für Recht und Informatik
- European Union Agency For Network And Information Security, "Privacy by design in big data-An overview of privacy enhancing technologies in the era of big data analytics", ~ (2015)
- European Union Agency For Network And Information Security, "Privacy and Data Protection by Design-from policy to engineering", ~ (2014)
- Protecting Consumer Privacy in ad Era of Rapid Change, FTC REPORT, "FEDERAL TRADE COMMISSION", ~ (2012)
- George Drosatos, "Towards Privacy by Design in Personal e-Health Systems", Proceedings of the 9th International Joint Conference on Biomedical Engineering Systems and Technologies(BIOSTEC 2016), 5 (2016)
- K. Chandramouli, "Knowledge Modeling for Privacy-by-Design in Smart Surveillance Solution", 2013 10th IEEE International Conference on Advanced Video and Signal Based Surveillance (2013), IEEE
- Martin Degeling, "Privacy by Socio-Technical Design: A Collaborative Approach for Privacy Friendly System Design", 2016 IEEE 2nd International Conference on Collaboration and Internet Computing (CIC) (2016), IEEE
- Michelle Chibba Ann Cavoukian, "Privacy, consumer trust and big data:Privacy by design and the 3 C'S", 2015 ITU Kaleidoscope Academic Conference: Trust in the Information Society (K-2015) (2015), IEEE
- Michael H. Davis, "A Cybermodel for Privacy by Design: Building privacy protection into consumer electronics", IEEE Consumer Electronics Magazine, 4(1) (2015), IEEE
- Noria Foukia, "PISCES: A framework for privacy by design in IoT", 2016 14th Annual Conference on Privacy, Security and Trust (PST) (2016), IEEE
- The NIST Definition of Colud Computing, "Peter Mell", National Institute of Standards and Technology, ~, pp.Special Publication 800-145 (2011)
- Peter Schaar, "Privacy by Design", Identity in the Information Society, 3(2) (2010)
- Thomas Lorünser, "Cloud Security and Privacy by Design", Conference paper(6th International Conference on E-Democracy) (2015)
- 利用者視点を踏まえたICTサービスに係る諸問題に関する研究会, "スマートフォンプライバシー イニシアティブ 概要 －利用者情報の適正な取扱いとリテラシー向上による新時代イノベーション－", ~ (2012)