가명정보 생명주기에 따른 개인정보보호 중심 설계 적용 원칙에 관한 연구
A Study on the Principle of Application of Privacy by Design according to the Life Cycle of Pseudonymization information
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
최근 개인정보가 데이터로 활용되면서 다양한 신산업 등이 발굴되고 있지만 체계적인 관리체계 구축 미흡 등으로 개인정보 유출 및 오남용 사례가 연이어 발생되고 있다. 또한 지난 ’20년 8월, 데이터 3법 시행 이후 개인정보를 가명·익명 처리하여 활용하는 서비스가 등장하고 있지만 불충분한 가명처리 및 가명정보 처리에 대한 안전성확보조치, 혐오표현 등의 민감정보의 처리 미흡으로 개인정보 이슈가 발생하고 있다. 이에 본 연구는 개인정보를 안전하게 활용하기 위하여 캐나다의 Ann Cavoukian[1]이 제시한 개인정보보호 중심 설계(Privacy by Design, 이하 PbD) 원칙을 기반으로 가명정보 생명주기에 적용할 수 있는 새로운 PbD원칙을 제안하였다. 또한, 제안한 방법에 대하여 개인정보보호 관련 전문가 30명을 대상으로 설문조사를 통하여 제안 방법의 유의미함을 확인할 수 있었다.
Abstract
Recently, as personal information has been used as data, various new industries have been discovered, but cases of personal information leakage and misuse have occurred one after another due to insufficient systematic management system establishment. In addition, services that use personal information anonymously and anonymously have emerged since the enforcement of the Data 3 Act in August 2020, but personal information issues have arisen due to insufficient alias processing, safety measures for alias information processing, and insufficient hate expression. Therefore, this study proposed a new PbD principle that can be applied to the pseudonym information life cycle based on the Privacy by Design (PbD) principle proposed by Ann Cavoukian [1] of Canada to safely utilize personal information. In addition, the significance of the proposed method was confirmed through a survey of 30 experts related to personal information protection.
참고문헌 (24)
- Ann Cavoukian, "Privacy by Design by Regulation", International Conference of Data Protection and Privacy Commissioners (2010)
- 김수정, "빅데이터, 데이터 소유권, 데이터 경제", 민사법학, 96, pp.3~40 (2021), 한국민사법학회[DOI]
- Mackey, E, "Understanding the Data Environment", XRDS: Crossroads, 20(1), pp.37~39 (2016)
- 최혜선, "개인정보보호의 신경향 －프라이버시 중심 디자인(Privacy by Design)을 중심으로－", 일감법학, (24), pp.305~340 (2013), 법학연구소[DOI]
- Personal Information Protection Commission, "Guidelines for processing pseudonym information", ~ (2021)
- 김나루, "‘Privacy by design’의 도입과 그 적용에 관한 소고", 성균관법학, 29(4), pp.1~30 (2017), 법학연구원[DOI]
- "General Data Protection Regulation, Regulation (2016) 2016", 679 of the European Parliament and of the Council, Regulation (EU), 2016
- Privacy and Data Protection by Design–from policy to engineering, "ENISA", ~ (2014)
- ENISA, "Pseudonymisation techniques and best practices", ~ (2019)
- ENISA, "DATA PSEUDONYMISATION : ADVANCED TECHNIQUES & USE CASES", ~ (2021)
- Simson L. Garfindel, "NIST IR8053De-Identification of Personal Information", NIST, ~ (2015)
- UK Announces Policy Directions for Online Hazardous Products Distribution, "Sung-ho Jin", KISDI, ~ (2021)
- Information Commissioner's Office, "Age appropriate design : a code of practice for online services", ~ (2020)
- Rolf H. Weber, "The Right to Be Forgotton", Journal of Intellectual Property, Information Technology and E-Commerce Law (2010)
- CNIL, "HOW CAN HUMANS KEEP THE UPPER HAND? The ethical matters raised by algorithms and artificial intelligence", ~ (2017)
- CNIL, "CONNECTED VEHICLES AND PERSONAL DATA", COMPLIANCE PACKEGE (2017)
- The children’s rights-by-design standard for data use by tech companies, "Pedro hartung", UNICEF, ~, pp.UNICEF Global Insight Issue brief, 5 (2020)
- Japan, "Personal Information Protection Act", ~ (2020)
- Bojana Bellamy, "Global Data Privacy Law and Practice-Looking Around the Corners" (2014), Centre for Information Policy Leadership
- Personal Information Protection Commission, "AI Personal Information Protection Autonomous Checklist", ~ (2020)
- Personal Information Protection Commission, "Six principles of personal information for the establishment of a smart city", ~ (2020)
- Office for Government Policy Coordination, "Guidelines for De-identification of Personal Data", ~ (2016)
- "ISO", IEC 20889. Information technology –Security techniques–Privacy enhancing data de-identification techniques, 2018
- 김동현, "개인정보 비식별 조치를 위한 데이터 상황 기반의 위험도 측정에 관한 새로운 방법", 정보보호학회논문지, 30(4), pp.719~734 (2020), 한국정보보호학회[DOI]