공공기관 개인정보보호 관리 수준 진단에서 평가 체계로의 전환 : 정책적 접근 및 제언
Transition from Diagnosis to Assessment System in Public Institution Personal Information Protection Management: Policy Approaches and Recommendations
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
본 논문은 정보기술 시대에서 강조되는 개인 정보의 중요성과 공공기관의 개인 정보 관리의 필요성을 다룬다. 공공기관에서 처리하는 개인 정보의 양이 지속해서 증가함에 따라, 더욱 효과적인 관리체계의 필요성이 대두되었다. 이에 따라, 정부는 기존의 개인 정보 관리 수준 진단 방식을 넘어서, 더욱 강화된 평가 중심의 체계인 '개인정보 보호 수준 평가제'를 도입하였다. 본 연구는 이러한 체계 전환의 배경, 과정, 그리고 2024년에 시행된 개인정보보호법 개정안의 주요 내용을 분석한다. 또한, 문헌조사 및 사례분석을 통해 공공기관 개인정보보호 관리 수준 진단의 현황 및 한계를 평가하고, 체계 전환 후 예상되는 개선 효과와 정책적 제언을 제공한다. 본 연구는 개인정보보호 정책의 강화가 국민 신뢰 제고 및 디지털 시대의 안정적 발전에 이바지할 것으로 전망한다.
Abstract
In the digital age, the importance of personal information has magnified, underscoring the need for enhanced personal information protection, especially within public institutions. Despite ongoing efforts since 2007, significant breaches in public sector information underline persistent vulnerabilities. This study advocates for a transition from a diagnostic to an assessment framework to fortify privacy management in public institutions, as mandated by recent legislative revisions. The amended Personal Information Protection Act introduces an assessment approach, aiming to comprehensively assess and mitigate risks by expanding the scope of evaluation and implementing robust regulatory measures. This study examines the limitations of the current diagnostic practices through literature review and case analysis and proposes a systematic approach to adopting the new assesment system. By enhancing the assessment framework, the study expects to improve the effectiveness of personal information management in public institutions, thereby restoring public trust and ensuring a stable progression into a more secure digital era. The transition to an assessment system is designed not only to address the gaps in the current framework but also to provide a methodical assessment that supports ongoing improvement and compliance with enhanced legal standards.
참고문헌 (13)
- Inter-ministerial Collaboration, "Public Sector Personal Information Leakage Prevention Plan 2022(33)", ~ (2022)
- "Number of personal information infringement reports and consultations during 2020.9~2024.4" (2024)[URL]
- "First implementation of the Public Institution Personal Information Protection Level Assessment" (2024)[URL]
- Shin Young-Jin, "The Improvement Plan for Diagnosis and Operation Procedure of Personal Information Management Level Diagnosis System", Korea Criminal Intelligence Review, 7(2), pp.71~99 (2021)
- Choi Myeong-gil, "Trends in Overseas Information Security Management", Review of KIISC, 23(5), pp.12~19 (2013)
- Minjung Park, "Analysis of the Connection between ISMS-P and GDPR in the Personal Information Protection Sector", Journal of the Korea Society of IT Services, 18(2), pp.55~73 (2019)
- Sung Wook Hong, "Effective Management of Personal Information & Information Security Management System(ISMS-P)Authentication systems", Journal of the Korea Academia-Industrial cooperation Society, 21(1), pp.634~640 (2020)
- Hyeong Chul Jeong, "Study on AHP and Non-Parametric Verification on the Importance of the Diagnosis Indicators of Personal Information Security Level", Journal of The Korean Data Analysis Society (JKDAS), 12(3), pp.1499~1510 (2010)
- Myeong-soo Jeong, "A Study on Personal Information Protection Management Assessment Method by DEA", Journal of the Korea Institute of Information Security & Cryptology, 25(3), pp.691~701 (2015)
- Kwang - Joon Ji, "Research on information security management level diagnosis and continuous management of goverment institutions", Master, pp.2023
- Gwang-il Ju, "Compliance and Implications for Public Officials in Charge of Personal Information Protection by Policy Trends", JOURNAL OF THE KOREA CONTENTS ASSOCIATION, 17(4), pp.461~467 (2017)
- 4th Basic Plan for Personal Information Protection, "Personal Information Protection Commission", ~ (2020)
- Research on Information Subject-Centered Personal Information Protection and Utilization System in the Digital Age, "Personal Information Protection Commission", ~ (2022)