개인정보 국외 이동에 관한 해외 입법례의 클라우드 서비스에 대한 적용 가능성 검토
Examining International and Foreign Rules on Transferring Personal Data Abroad in the Cloud Service
0
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
클라우드 서비스란 인터넷을 통해 하드웨어, 소프트웨어, 정보 데이터베이스 등 모든 컴퓨팅 자원을 이용자가 별도로 보유하거나 저장하지 않고도 필요한 때에 이용할 수 있도록 하는 컴퓨팅 서비스이다. 클라우드 서비스에서 가상화 및 분산화 기술은 클라우드 서비스의 편의성을 제공하기 위한 핵심 기술이지만, 클라우드 서비스에서 개인정보 국외 이동의 주요한 원인이기도 하다. 클라우드 서비스에서 개인정보 국외 이동의 개념에는 물리적으로 국외에 위치한 서버나 데이터센터에 개인정보가 저장되는 개념과 국내에 위치한 서버나 데이터센터에 저장된 개인정보에 국외로부터 접근하는 국외 이동의 개념이 포함되어야 할 것이다. 또한 클라우드 서비스에서는 개인정보가 실시간으로 여러 국가에 걸쳐 이동하는 특수한 양상이 나타난다. 요컨대 현재의 개인정보 국외 이동과 관련한 각국 및 해외 규정들은 기존의 물리적 환경에서의 개인정보 국외 이동에 국한되어 인터넷 환경에서의 개인정보 국외 이동이 고려되지 않았을 뿐만 아니라 클라우드 서비스의 특수성이 고려되지 않은 규정이라는 점에서, 클라우드 서비스에서 개인정보 국외 이동의 개념과 특성을 포괄하는 규정이 필요하다고 본다.
Abstract
Cloud service is a new computing service which supplies users with ubiquitous access to resources, such as hardware, software and databases, without requesting users to own the necessary resources. A cloud service functions on the basis of critical cloud computing’s technologies such as web service technologies, virtualization technology and decentralization technology. While such technologies are the critical technologies in the cloud computing service, the technologies are the main causes transferring personal data abroad in the cloud service, storing personal data in the cloud service provider’s datacenters abroad and moving the data from a datacenter in this country to another datacenter in that, from moment to moment. International and foreign rules on transferring personal data abroad can be applied to movements of personal data in the traditional off line and existing internet environment. However, considering the characteristics of movements of personal data in the cloud service, the existing international and foreign rules seem not to be the appropriate rules for the cases of transferring personal data abroad in the cloud service. Therefore, in the age of the cloud service, the rules to apprehend overseas transfers of personal data in the cloud service are needed, considering the characteristics of transferring personal data in the cloud service.
참고문헌 (35)
- 노현숙, "클라우드 서비스에서 개인정보 국외 이동의 개념에 관한 연구", 고려법학, (79), pp.209~245 (2015), 법학연구원
- 민영수, "클라우드 컴퓨팅을 위한 분산 파일 시스템 기술", 정보과학회지, 27(5) (2009)
- 한재선, "클라우드 컴퓨팅 플랫폼과 오픈 플랫폼 기술", 정보처리학회지, 16(2) (2009)
- Above the Clouds: A Berkeley View of Cloud Computing, "Armbrust, M.", University of California at Berkley, ~, pp.Technical Report No. UCB (2009), EECS-2009-28
- Billings, John T., "European Protectionism in Cloun Computing: Addressing Concerns over the Patriot Act", CommLaw Conspectus, 21, pp.211~ (2012)
- Boone, M. Scott, "The Past, Present, and Future of Computing and Its Impact on Digital Rights Management", Mich. St. L. Rev, 413 (2008)
- Buyya, Rajkumar, "Marketoriented Cloud Computing:Vision, Hype, and Reality for Delivering IT Services as Computing Utilities", Proceedings of the 10th IEEE International Conference on High Performance Computing and Communications (2008)
- Carey, Peter, "Data Protection: A Practical Guide to UK and EU Law", ~ (2009)
- Cole, Patrick E., "New Challenges to the U.S. Multinational Corporarion in the European Economic Community: Data Protection Laws", N.Y.U. J. Int’l L. & Pol, 17, pp.893~ (1985)
- Dial, Audra A., "Trade Secrets in the Cloud: Assessing and Mitigating the Risks", J. Internet L, 17(11), pp.1~ (2014)
- Greenleaf, Graham, "The Influence of european Data Privacy Standards Outside europe: Implications for Globalization of Convention 108", Int’l Data Privacy L, 2, pp.68~ (2012)
- Hondius, Frits W., "Data Law in europe", Stan. J. Int’l L, 16, pp.87~ (1980)
- "European Distrust of US Data Security Creates Market For Local Cloud Service:Europeans Worried About the US Patriot Act Prefer to Keep Their Data in the EU" (2011)[URL]
- Kesan, Jay P., "Information Privacy and Data Control in Cloud Computing: Consumers, Privacy Preferences, and Market Efficiency", Wash. & Lee L. Rev, 70, pp.341~ (2013)
- "The NIST Definition of Cloud Computing, Version 15" (2009)[URL]
- O’Reilly, James T, "Homeland Security and The Future of Privacy Rights: A Commentary", Jun Fed.Law, 55 (2008)
- Rashbaum, Kenneth N, "Outrun the Lions: A Practical Framework for Aanaysis of Legal Issues in the Evolution of Cloud Computing", Ave Maria L. Rev, 12, pp.71~ (2014)
- Reidenberg, Joel R., "The Fundamental Role of Privacy and Confidence in the Network", Wake Forest L. Rev, 105 (1995)
- Ryan, W. Michael, "Insights into Cloud Computing", Intell. Prop. & Tech. L.J, 22(11), pp.22~ (2010)
- Schwartz, Paul M., "Preemption and Privacy", Yale L.J, 118, pp.902~ (2009)
- Schwartz, Paul M., "Information Privacy in the Cloud", U. Pa. L. Rev, 161, pp.1623~ (2013)
- Schwartz, Paul M, "European Data Protection Law and Restrictions on International Data Flows", Iowa L. Rev, 80, pp.471~ (1995)
- Vouk, Mladen A., "Cloud Computing-Issues, Research and Implementations", J. Computing & Info. Tech, 16, pp.235~ (2008)
- Warren, Samuel D., "The Right to Privacy", Harv. L. Rev, 4, pp.193~ (1890)
- Whitman, James Q., "The Two Western Cultures of Privacy: Dignity Versus Liberty", Yale L.J, 113, pp.1151~ (2004)
- "Additional Protocol to the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data regarding supervisory authorities and transborder data flows", ~ (2001)
- "Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data", ~ (1981)
- "Data Protection Act", ~ (1998)
- "Directive 95", 46, pp.1995, ~
- "Guidelines for the Regulation of Computerized Personal Data Files", ~ (1989)
- "OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data", ~ (1980)
- "Proposal for a Regulation of the european Parliament and of the council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation)", ~ (2012)
- "Transfers of personal data to third countries: Applying Article 26 (2) of the EU Data Protection Directive to Binding Corporate Rules for International Data Transfers", ~ (2003)
- United States International Trade Commission, "Policy Challenges of Cross-Border Cloud Computing", Journal of International Commerce and Economy (2012)
- "U.S.-EU Safe Harbor", ~ (2000)