인공지능 시스템에서 개인정보 처리방침 수립을 위한 법적·기술적 요구사항 분석 연구
A Legal and Technical Analysis for Establishing Privacy Policies on Artificial Intelligence Systems
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
AI 기술의 급속한 발전과 더불어 AI 시스템에서 개인정보를 대량으로 수집,처리,활용하는 경우가 증가하고 있다. 이에 따라 AI 시스템의 개인정보 처리에 대한 투명성과 책임성, 정보주체 권리보장, 개인정보 침해 위험 최소화 등이 중요한 과제로 대두되고 있다. 그러나 기존 개인정보 처리방침에는 일반적인 개인정보 처리에 대한 내용만 공개 되고 있으며, AI 시스템에 대한 개인정보 처리방침은 부재한 상황이다. 이러한 문제를 해결하기 위해 개인정보 보호법 개정에 따른 개인정보 처리방침 평가제 시행 대응과 함께 AI 시스템의 설계 및 개발, 운영 과정에서 개인정보 처리에 대한 AI 시스템 개인정보 처리방침 수립·공개를 새롭게 제안한다. 이를 통해 본 연구는 현행 개인정보 보호법 상 자동화된 결정에 따른 정보주체의 설명요구권 및 거부권 행사 규정에도 보완적인 역할을 할 수 있을 것으로 기대된다.
Abstract
With the rapid development of AI technology, AI systems are increasingly collecting, processing, and utilizing personal information in large quantities. As a result, transparency and accountability of personal information processing by AI systems, ensuring the rights of information subjects, and minimizing the risk of personal information infringement are becoming important issues. However, the existing privacy policy only discloses the personal information processing in general, and there is no privacy policy for AI systems. In order to solve these problems, In response to the implementation of the privacy policy evaluation system in accordance with the revision of the Personal Information Protection Act, we propose a new AI system privacy policy establishment and disclosure for personal in the design, development and operation of AI system. This study is expected to play a complementary role to the regulations on the right of data subjects to request an explanation and exercise the right of refusal for automated decisions under the current Personal Information Protection Act.
참고문헌 (24)
- Privacy Commissioner's Office, "Privac y Commissioner Announces Results of Preliminary Inspection of Major Artifi cial Intelligence Services", Press Release, ~ (2024)
- Xudong Pan, "Privacy Risks of Gene ral-Purpose Language Models", 2020 IEEE Symposium on Security and Privacy, pp.1314~1331 (2020)
- Yong-Jin Shin, "Compliance with Personal Information Protection in the AI Service Process for AI Service Providers : Development and Importance Analysis", Journal of Korean Association for Regional Information Society, 25(2), pp.1~29 (2022)
- Jin-ho Ryu, "A study on Protecting Privacy in Artificial Intelligence environment", Korea Society of Information Communication Security Ethics, pp.141~157 (2020)
- Chang-Uk Jeon, "A Study on the Com parison of the Domestic and Foreign Privacy Policies by Internet Sites", Master, pp.2017
- Il-Yong Kim, "A Privacy Certification Systems Improving the Information co mprehension, Trustworthiness, Risk p erception and Intention to Provide Pe rsonal Information", Master, pp.2020
- Ha Ram Kim, "A Study on the improv ement of privacy policy : Focusing on Life-Insurance Company", Master, pp.2023
- Yoon-Kyo Jeong, "Reliability Analysis of Privacy Policies Using Android Stat ic Analysis", KIPS Transactions on Co mputer and Communication Systems, 12(1), pp.17~24 (2023)
- Tae-Chul Jung, "A Comparative Analysis of the Lega l Systems of Four Major Countries on Privacy Policy Disclosure", 22(6), pp.1~15 (2023)
- Yong-Hyun Jo, "Pri vacy Policy Analysis Techniques Usin g Deep Learning", Journal of The Kor ea Institute of Information Security &Cryptology, 30(2), pp.305~312 (2020)
- Yong-Jin Shin, "Compliance with Personal Information Protection in the AI Service Process for AI Service Providers : Development and Importance Analysis", Journal of Korean Association for Regional Information Society, 25(2), pp.1~29 (2022)
- Korea Internet & Security Agency, "AI Personal Information Protection Self-Checklist", ~ (2021)
- Veale, M., "Demys tifying the Draft EU Artificial Intellig ence Act", Computer Law Review Inte rnational, 22(4), pp.97~112 (2021)
- Korea Internet & Security Agency, "GDPR guidebook revision", 71~
- Korea Internet & Security Agency, "GDPR guidebook revision", 107~ (2022)
- Korea Internet & Security Agency, "G DPR guidebook revision", 126~ (2022)
- Korea Internet & Security Agency, "GDPR guidebook revision", 129~130 (2022)
- Chang-Sun Choi, "A Study on the Co mparison and Improvement of Manage ment Standards for Responding to Glo bal Personal Information Protection R egulations of Korean Companies : EU GDPR and CCPA in California, USA", Master, pp.2022
- Feng, Y., "China's Perso nal Information Protection Law: An o verview and comparison with the EU GDPR", Computer Law & Security Review, 45, pp.105694~ (2022)
- "china genertive AI" (2024)[URL]
- Matsuo, T, "The impact of Japan's am ended data protection law on artificial intelligence", International Data Privacy Law, 12(1), pp.51~68 (2022)
- "Artificial Intelligence" (2024)[URL]
- Yong-Jin Shin, "The Improvement Plan for Personal Information Protection for Artificial Intelligence(AI)Service in South Korea", Journal of Convergence for Information Technology, 11(3), pp.20~33 (2021)
- 2023 Annual Report on Perso nal Information Protection, "Personal Information Protection Commissi", ~ (2023)