안드로이드 환경에서 개인정보 처리방침의 투명성 확보방안에 관한 연구: GDPR을 기반으로
A Study on the Methods for Ensuring the Transparency of the Privacy Policies in Android Environment: Based on General Data Protection Regulation
0
조회
0
다운로드
3
인용
0
참고문헌
키워드
초록
본 연구는 EU 회원국에서 상위권을 차지하는 안드로이드 애플리케이션 50개에 대한 개인정보처리방침을 분석하여, EU 일반 개인정보 보호법(GDPR)이 규정하는 투명성 확보방안을 제시하였다. WP29 작업반에서 제시한 투명성 관련 지침을 참고하여, 개인정보처리의 투명성 확보를 위한 요소를 도출하고, 각 요소에 대한 단계별 확인 절차를거쳤다. 그 결과, 현재 구글플레이스토어와 애플리케이션에서 각각 제공하고 있는 개인정보처리방침을 일원화하고, 개인정보처리방침을 설명하는 내용을 좀 더 이해하기 쉬운 표현으로 기술할 필요성이 제기되었다. 또한, 신속한 정보 제공 및 컨트롤러의 정보 기재 등이 개선될 필요가 있음이 제시되었다. 본 연구는 GDPR 5조 개인정보처리원칙 7가지중 하나인 투명성의 원칙에 기반을 두어 분석하였으며, 향후 실질적인 준수를 통해 EU의 GDPR에 선제적으로 대응할 수 있는 기초 자료로 활용될 수 있을 것이다.
Abstract
In this study, we analyzed the privacy policies of 50 Android applications that are on the top chart in EU members topresent the methods for enhancing transparency based on GDPR (General Data Protection Regulation). Based on theguidelines in relation to transparency stipulated in WP29, this study extracted factors of transparency in order to ensuretransparency of privacy data processing and carried out the verification procedures for each factor. The results revealed thatthe privacy policies provided in Google Play Store and applications need to be matched, the descriptions of the privacypolicies need to be written in clear and plain language for readers to understand easily. and that it is necessary to provideinformation quickly and improve the descriptions of information which the data controller discloses. The research findings ofthis study could be used as a preliminary data for proactive responses to the EU's GDPR by substantially complying withthe transparency of GDPR.
참고문헌 (27)
- "statcounter"[URL]
- 손영화, "EU 일반데이터보호규정(GDPR)에 대한 우리나라 기업의 대응방안", 비교사법, 26(1), pp.413~452 (2019), 한국사법학회[DOI]
- "Plainte au titre de l’article 77(1) du RGPD" (2019)[URL]
- CNIL, "The CNIL’s restricted committee imposes a financial penalty of 50 Million euros against GOOGLE LLC", ~ (2019)
- "General Data Protection Regulation, Regulation (2016) 2016", 679 of the European Parliament and of the Council, Regulation (EU) (2016, 679), 2016
- Choi, Hanbyul, "The role of privacy fatigue in online privacy behavior", Computers in Human Behavior, 81, pp.42~51 (2018)
- Tesfay, Welderufael B., "Privacy Guide: towards an implementation of the EU GDPR on internet privacy policy evaluation", Proceedings of the Fourth ACM International Workshop on Security and Privacy Analytics (2018)
- "WP29. Guidelines on transparency under Regulation 2016", 679, 2017
- Tesfay, Welderufael B., "Privacy Guide: towards an implementation of the EU GDPR on internet privacy policy evaluation", Proceedings of the Fourth ACM International Workshop on Security and Privacy Analytics (2018), ACM
- Oltramari, Alessandro, "PrivOn to: A semantic framework for the analysis of privacy policies", Semantic Web, 9(2), pp.185~203 (2018)
- Liu, Fei, "Modeling language vagueness in privacy policies using deep neural networks", 2016 AAAI Fall Symposium Series (2016)
- 이구연, "IoT 환경에서 GDPR에 부합하는 개인정보수집 동의 절차", 한국정보기술학회논문지, 17(5), pp.130~137 (2019), 한국정보기술학회[DOI]
- Bhatia, "Ambiguity in Privacy Policies and Perceived Privacy Risk", Diss. figshare, ~ (2019)
- Mohan, Jayashree, "Analyzing gdpr compliance through the lens of privacy policy", arXiv preprint arXiv, ~ (2019)
- Singh, Ravi Inder, "Evaluating the readability of privacy policies in mobile environments", International Journal of Mobile Human Computer Interaction, 3(1), pp.55~78 (2011)
- Yu, Le, "Autoppg: Towards automatic generation of privacy policy for android applications", Proceedings of the 5th Annual ACM CCS Workshop on Security and Privacy in Smart phones and Mobile Devices (2015), ACM
- Papageorgiou, Achilleas, "Security and privacy analysis of mobile health applications: the alarming state of practice", IEEE Access, 6, pp.9390~9403 (2018)
- Mangset, "Analysis of Mobile Application's Compliance with the General Data Protection Regulation (GDPR)", MS, pp.2018
- "appannie. com" (2019)[URL]
- "KISA"[URL]
- Reidenberg, Joel R., "Ambiguity in Privacy Policies and the Impact of Regulation", The Journal of Legal Studies, 45(S2) (2016)
- Schaub, Florian, "Designing effective privacy notices and controls", IEEE Internet Computing (2017)
- Spache, "A new readability formula for primary-grade reading materials", The Elementary School Journal, 53(7), pp.410~413 (1953)
- Kincaid, J. Peter, "Derivation of new readability formulas (automated readability index, fog count and flesch reading ease formula) for navyenlisted personnel", ~ (1975)
- Milne, George R, "A longitudinal assessment of online privacy notice readability", Journal of Public Policy & Marketing, 25(2), pp.238~249 (2006)
- Kummer, Michael, "When private information settles the bill: Money and privacy in Google’s market for smartphone applications", Management Science (2019)
- Simon, "How Europemissed the mobile wave", 18(4), pp.12~32 (2016)