데이터 경제와 정보보호 관리·감독제도의 개선에 대한 검토
A preliminary study on methods to improve information protection, management, and supervision policies as the data economy ages
3
조회
0
다운로드
3
인용
0
참고문헌
키워드
초록
Since the "4th Industrial Revolution" has been a big issue today, the importance and public attention regarding data also has increased. In addition, activities that create new values while acting as catalysts for the development of other industries by using various types of data are called “Data economy” or “Data industry”. And many policies are also being designed to support them. While Korean government implements various policies that consider the use of data to promote the data economy and industry, it also operates systems to prevent infringement accidents and minimize information leakage damage. However, the financial institutions that caused large-scale personal information leakage accidents are excluded from the subject of the Inforamation Security Management System (ISMS) certification obligations, and domestic universities have refused the certification review. In addition, in the case of the information protection (voluntary) disclosure system, no companies participated for a year since the implementation was insignificant. Even in public institutions that need to take the initiative in protecting personal information, cases of unauthorized access and leakage of personal information are constantly being occured. And cryptocurrency exchanges where data itself is converted into cashable assets have been hacked. In this era of data economy and industry, the demand for information security management and supervision system is expected to gradually increase, it is expected that the level of social expectations for policy and system operation in this regard will also increase. In this paper, we first looked at the data economic environment and related trends, and examined the current status and limitations of the current information protection and management system. Afterwards, we tried to suggest some ways to improve the information protection, management, and supervision systems, and suggest directions to help secure the use of data in the future to meet the era of secured data economy.
Abstract
Since the "4th Industrial Revolution" has been a big issue today, the importance and public attention regarding data also has increased. In addition, activities that create new values while acting as catalysts for the development of other industries by using various types of data are called “Data economy” or “Data industry”. And many policies are also being designed to support them. While Korean government implements various policies that consider the use of data to promote the data economy and industry, it also operates systems to prevent infringement accidents and minimize information leakage damage. However, the financial institutions that caused large-scale personal information leakage accidents are excluded from the subject of the Inforamation Security Management System (ISMS) certification obligations, and domestic universities have refused the certification review. In addition, in the case of the information protection (voluntary) disclosure system, no companies participated for a year since the implementation was insignificant. Even in public institutions that need to take the initiative in protecting personal information, cases of unauthorized access and leakage of personal information are constantly being occured. And cryptocurrency exchanges where data itself is converted into cashable assets have been hacked. In this era of data economy and industry, the demand for information security management and supervision system is expected to gradually increase, it is expected that the level of social expectations for policy and system operation in this regard will also increase. In this paper, we first looked at the data economic environment and related trends, and examined the current status and limitations of the current information protection and management system. Afterwards, we tried to suggest some ways to improve the information protection, management, and supervision systems, and suggest directions to help secure the use of data in the future to meet the era of secured data economy.
참고문헌 (36)
- 고학수, "데이터오너십 - 내 정보는 누구의 것인가?" (2019), 박영사
- 새로운 기술혁신 촉진을 위한 발전적인 규제 대응 방향, "안준모", 옥탑방책방, ~ (2019)
- 빅데이터 환경에서 개인정보보호 강화를 위한 법·제도적 대책 방안 연구, "개인정보보호위원회", ~ (2012)
- 지능정보사회 대응을 위한 개인정보보호 법제 정비방안, "개인정보보호위원회", ~ (2017)
- 고환경, "정보이동권과 마이데이터산업", 서울대학교 금융법센터 BFL, (93), pp.22~39 (2019)
- 4차 산업혁명 대응 법제 정비 연구, "과학기술정보통신부", ~, pp.방송통신정책연구 17-방통-83 (2018)
- 김기환, "개인정보는 보호만 할 것인가?: 외국의 개인정보 활용정책 비교", 한국지역정보화학회지, 18(3), pp.65~93 (2015), 한국지역정보화학회[DOI]
- 김성민, "공정공시제도 도입이후 기업의 공시행태 및 비기대실적치의 정보효과", Asia-Pacific Journal of Financial Studies, 34(3), pp.71~100 (2005), 한국증권학회
- 김현경, "미국 ‘데이터 브로커’ 제도의 국내법적 함의", 경제규제와 법, 11(2), pp.248~268 (2018), 법학연구소
- 나종회, "정보시스템 감리제도 개선방안에 관한 탐색적 연구", 한국지역정보화학회지, 19(3), pp.91~107 (2016), 한국지역정보화학회[DOI]
- 노승용, "공공기관 감사품질 제고를 위한 협력감사 활용 방안에 관한 연구", 한국정책과학학회보, 20(2), pp.95~122 (2016), 한국정책과학학회
- 빅데이터 활용과 개인정보보호, "박미영", 한국금융연구원, 미래금융연구센터, 1~9 (2017)
- 박훤일, "정보이동권의 국내 도입 방안 - EU GDPR의 관련 규정을 중심으로 -", 경희법학, 52(3), pp.211~232 (2017), 법학연구소[DOI]
- 반혜정, "정보공시의 투명성이 이익의 질에 미치는 영향", 회계와 정책연구, 17(4), pp.201~224 (2012), 한국회계정책학회
- 빅데이터 관련 개인정보 보호법제 개선방안 연구, "법제처", ~ (2017)
- 사지연, "소비자의 개인정보 자기관리 활성화 방안", 한국소비자원 소비자정책동향, (92), pp.1~26 (2018)
- 서정호, "마이데이터산업 도입에 따른 금융권의 대응방안", 금융포커스, 27(22), pp.2~3 (2018)
- 양광완, "공공기관의 효율적인 정보시스템 운영관리를 위한 공통 프레임워크 정립에 관한 연구", 정보화연구, 12(1), pp.41~50 (2015), 한국엔터프라이즈아키텍처학회
- 오상희, "공시행태에 따른 회계이익의 가치관련성에 관한 연구", 산업경제연구, 28(5), pp.2065~2086 (2015), 한국산업경제학회
- 여영준, "경영진단의견서(MD&A) 공시품질과 회계이익 투명성", 전문경영인연구, 20(4), pp.257~276 (2017), 한국전문경영인학회
- 유제민, "레그테크(RegTech)의 도입과 규제법학의 과제", 경제규제와 법, 12(1), pp.7~25 (2019), 법학연구소[DOI]
- 윤상오, "빅데이터 시대의 한국과 영국간 개인데이터 활용정책 비교 연구", 한국정책과학학회보, 20(1), pp.29~56 (2016), 한국정책과학학회
- 윤주호, "빅데이터 활용과 관련된 법적 쟁점", 서울대학교 금융법센터 BFL, (93), pp.40~59 (2019)
- 이성호, "서비스 수준 협약에 따른 정보시스템 운영감리 모형", 디지털융복합연구, 10(6), pp.71~82 (2012), 한국디지털정책학회[DOI]
- 이승희, "EU 일반개인정보 보호규정(GDPR)과 금융정보 규제", 서울대학교 금융법센터 BFL, (93), pp.6~21 (2019)
- 정한신, "개인정보자기결정권에 관한 헌법재판소 결정의 비판적 검토", 법학연구, 56(4), pp.1~31 (2015), 법학연구소
- 장시영, "개인정보 영향평가(Privacy Impact Assessment) 제도의 국내ㆍ외현황 비교 및 시사점 분석", 정보통신방송정책, 30(14)통권 : 674, pp.1~12 (2018)
- 조영임, "빅데이터의 이해와 주요 이슈들", 한국지역정보화학회지, 16(3), pp.31~52 (2013), 한국지역정보화학회[DOI]
- 조창훈, "국내 레그테크의 시장성 검토 및 도입 시 고려사항", 전자금융과 금융보안, (8), pp.66~79 (2017)
- 주양근, "정보시스템 운영감리가 정보시스템 품질에 미치는 영향", 한국지식정보기술학회 논문지, 9(6), pp.781~795 (2014), 한국지식정보기술학회
- 정보시스템감리 제도발전과 품질향상을 위한 핵심성공요인과 개선방안 연구, "한국전산원", 1~56 (2000)
- 한은영, "영국 오픈데이터 정책의 특징 및 시사점", 정보통신방송정책, 26(23)통권 : 591, pp.1~24 (2014)
- EU Commission, "Article 29 Working Party, Guidelines on the right to data portability, wp242rev.01", ~ (2017)
- EU Commission, "Article 29 Data Protection Working Party, Guidelines on Data Protection Impact Assessment(DPIA) and determining whether processing is "likely to result in a high risk" for the purposes of Regulation 2016", 679”, 2017
- Protecting Consumer Privacy in an Era of Rapid Change : Recommendations For Businesses and Policymakers, "FTC", ~ (2012)
- Margaret Betzel, "Privacy Law Developments in California", A Journal of Law and Policy for the Information Society, 2(3), pp.831~877 (2006)