스마트도시와 개인정보 보호
Legal Issues Regarding Smart City and Personal Information Protection
0
조회
0
다운로드
5
인용
0
참고문헌
키워드
초록
As a new growth engine of the Fourth Industrial Revolution, a smart city, “A sustainable city that solves the problem of urbanization and improves the quality of life by combining high-tech information and communication technology with existing architectural and civil engineering technologies and urban infrastructure”, is emerging. Smart cities are based on personal information rather than traditional urban infrastructure such as roads and buildings. Therefore, the key legal issue in smart cities is the legitimate processing of personal information. However, the smart city law does not have any practical stipulations on how to handle personal information legitimately and how to protect personal information. In short, the smart city law was named ‘smart’, but it is a ‘non-smart’ law that entrusts everything to the existing personal information protection legal system. Due to the technical and social environment of the smart city, it is difficult to obtain the consent of the information subject, and even in accordance with the current personal information protection law, there is a limit in legally processing personal information in the smart city. In other words, the current legal system does not guarantee the processing of legitimate personal information in smart cities, and as a result, violations of the actual law are virtually neglected. This paper analyzes the overseas legal systems of the United States, Japan, and the European Union based on the awareness of these problems, and then proposes ways to improve the legal system as follows. First, it is necessary to fundamentally convert the current opt-in personal information protection law system to an opt-out method in which the information subject can exert management control afterward. Second, in order to prevent legislative gaps before converting the system to opt-out, the smart city law or the personal information protection law should be partially revised to provide an institutional basis that is consistent with the reality of personal information processing in smart cities. Third, it is necessary to introduce ‘privacy by design’ concept that reflects on the development of products and services in consideration of personal information protection issues from the design stage in a flexible discipline method.
Abstract
As a new growth engine of the Fourth Industrial Revolution, a smart city, “A sustainable city that solves the problem of urbanization and improves the quality of life by combining high-tech information and communication technology with existing architectural and civil engineering technologies and urban infrastructure”, is emerging. Smart cities are based on personal information rather than traditional urban infrastructure such as roads and buildings. Therefore, the key legal issue in smart cities is the legitimate processing of personal information. However, the smart city law does not have any practical stipulations on how to handle personal information legitimately and how to protect personal information. In short, the smart city law was named ‘smart’, but it is a ‘non-smart’ law that entrusts everything to the existing personal information protection legal system. Due to the technical and social environment of the smart city, it is difficult to obtain the consent of the information subject, and even in accordance with the current personal information protection law, there is a limit in legally processing personal information in the smart city. In other words, the current legal system does not guarantee the processing of legitimate personal information in smart cities, and as a result, violations of the actual law are virtually neglected. This paper analyzes the overseas legal systems of the United States, Japan, and the European Union based on the awareness of these problems, and then proposes ways to improve the legal system as follows. First, it is necessary to fundamentally convert the current opt-in personal information protection law system to an opt-out method in which the information subject can exert management control afterward. Second, in order to prevent legislative gaps before converting the system to opt-out, the smart city law or the personal information protection law should be partially revised to provide an institutional basis that is consistent with the reality of personal information processing in smart cities. Third, it is necessary to introduce ‘privacy by design’ concept that reflects on the development of products and services in consideration of personal information protection issues from the design stage in a flexible discipline method.
참고문헌 (44)
- 김정오, "코드 2.0" (2009), 나남출판사
- Lewis Mumford, "역사속의 도시" (1990), 명보문화사
- Jeremy Bentham, "파놉티콘" (2017), 책세상
- 권헌영, "한국형 규제샌드박스의 현황과 향후 과제", KISO 저널, (35) (2019), 한국인터넷자율정책기구
- 김남심, "Privacy by design의 내용과 법 제도", 성균관법학, 30(4), pp.35~64 (2018), 법학연구원[DOI]
- 김도승, "규제프리존의 공법적 함의와 정당화요소", 정보법학, 20(2), pp.201~227 (2016), 한국정보법학회
- 김용대, "인공지능산업 육성을 위한 개인정보보호 규제 발전 방향", 경제규제와 법, 9(2), pp.161~176 (2016), 법학연구소
- 김용훈, "스마트 도시와 스마트 빌딩 운영을 위한 실효적 법제도적 전략", 법학연구, 27(3), pp.67~95 (2019), 법학연구소[DOI]
- 김일환, "미국의 개인정보보호법제에 관한 연구", 미국헌법연구, (10) (1999), 미국헌법학회
- 김태한, "감시사회와 관련된 법률적 쟁점", 법조, 53(5), pp.54~86 (2004), 법조협회
- 심우민, "사물인터넷 개인정보보호의 입법정책", 헌법학연구, 21(2), pp.1~36 (2015), 한국헌법학회
- 이대희, "빅데이터와 개인정보 보호 - 통지와 동의의 원칙을 중심으로 -", 정보법학, 19(2), pp.127~158 (2015), 한국정보법학회
- 이우진, "미국의 스마트시티에 관한 연구개발 동향과 시사점", 토지법학, 34(2), pp.257~291 (2018), 한국토지법학회[DOI]
- 이인호, "제2세대 프라이버시보호법으로서의 개인정보보호법에 대한 이해", 사법, 1(8), pp.35~89 (2009), 사법발전재단[DOI]
- 이재용, "스마트시티법 재개정의 의미와 향후 과제", 한국도시지리학회지, 20(3), pp.91~101 (2017), 한국도시지리학회[DOI]
- 정연덕, "클라우드 서비스와 개인 정보 보호의 문제점", 정보법학, 15(3), pp.31~54 (2011), 한국정보법학회
- 최종권, "스마트도시 구현을 위한 법적 쟁점에 관한 연구", 중앙법학, 20(3), pp.43~82 (2018), 중앙법학회[DOI]
- 최호성, "규제자유특구와 지역특화발전특구에 대한 비교 연구", 디지털융복합연구, 17(2), pp.31~36 (2019), 한국디지털정책학회[DOI]
- 한귀현, "일본 개정개인정보보호법의 주요내용과 그 시사점", 공법학연구, 18(4), pp.531~559 (2017), 한국비교공법학회[DOI]
- 홍성욱, "벤담의 파놉티콘(Panopticon)에서 전자 시놉티콘(Synopticon)까지:감시와 역감시, 그 열림과 닫힘의 변증법", 한국과학사학회지, 23(1) (2001), 한국과학사학회
- 도시혁신 및 미래성장동력 창출을 위한 스마트시티추진전략, "4차산업혁명위원회", ~ (2018)
- 제3차 개인정보 보호 기본계획(2018~2020년), "개인정보보호위원회", ~ (2016)
- 데이터 산업 활성화 전략, "관계부처 합동", ~ (2018)
- 스마트시티 국가 시범도시 기본구상안 수립현황 및 향후추진계획, "관계부처 합동", ~ (2018)
- 2018년도 주거실태조사 요약보고서, "국토교통부", ~ (2019)
- 제3차 스마트도시 종합계획(2019~2023), "국토교통부", ~ (2019)
- 스마트도시 조성 및 산업진흥 등에 관한 법률 일부개정법률안 검토보고(의안번호 제12734호), "국회 국토교통위원회", ~ (2018)
- 김성천, "미국 캘리포니아주 소비자프라이버시법(CCPA)의 주요내용과 시사점", 소비자정책, (93) (2018), 한국소비자보호원
- 일본의 혁신분야 규제개혁 동향과 시사점, "김윤경", 한국경제연구원, ~, pp.KERI Brief 18-08 (2018)
- 스마트시티 조성확산을 위한 제도개선 연구, "나채준", 한국법제연구원, ~ (2018)
- 오병철, "네이버 프라이버시백서" (2016), 네이버
- 이재용, "스마트시티 유형에 따른 전략적 대응방안 연구" (2018), 국토연구원
- 참여연대, "개인정보보호법 개정안 등에 관한 참여연대 의견서", ~ (2019)
- 스마트시티 발전전망과 한국의 경쟁력, "한국정보화진흥원", ~, pp.IT & Future Strategy 제6호 (2016)
- 행정자치부, "개인정보보호 법령 및 지침ㆍ고시 해설", ~ (2016)
- European Union Agency For Fundamental Rights, "Handbook on European data protection law" (2018), EU Publication Office
- United Nations, "World Urbanization Prospects" (2019), United Nations
- Carina M. Schlebusch, "Southern African ancient genomes estimate modern human divergence to 350,000 to 260,000 years ago", Science, 358(6363), pp.652~ (2017)
- Kelsey Finch, "Welcome to the Metropticon: Protecting Privacy in a Hyperconnected Town", Fordham Urb. L. J., 41, pp.1581~ (2014)
- Liesbet van Zoonen, "Privacy concerns in smart cities", Government Information Quartly, 33, pp.472~ (2016)
- Lilian Edwards, "Privacy, Security and Data Protection in Smart Cities: A Critical EU Law Perspective", Eur. Data Prot. L. Rev., 2, pp.28~ (2016)
- Michael L. Rustad, "How the EU's General Data Protection Regulation Will Protect Consumers Using Smart Devices", Suffolk U. L. Rev., 52, pp.227~ (2019)
- European Union Article 29 Data Protection Working Party, "Opinion 8", 2014 on the on Recent Developments on the Internet of Things, EN WP 223, pp.2014, ~
- Reclaiming the Smart City: Personal data, trust and the new commons, "The Decode Project", European Union, ~ (2018)