개인정보 비식별 조치를 위한 데이터 상황 기반의 위험도 측정에 관한 새로운 방법
A New Scheme for Risk Assessment Based on Data Context for De-Identification of Personal Information
2
조회
0
다운로드
8
인용
0
참고문헌
키워드
초록
본 논문은 최근 개정된 데이터 3법에 맞추어 조직 내 실무자들이 개인정보를 활용함에 있어 비식별 조치 수행 시위험도에 따른 처리 수준 산정을 위한 새로운 측정방법을 제안한 것이다. 우리가 제안한 방법은 위험도 측정 시 데이터만이 아닌 데이터를 둘러싼 주위 상황을 고려하였고, 모든 분야에 적용이 가능하도록 범용 환경에서 데이터 상황을 크게 데이터 활용방법, 데이터 이용환경, 그리고 데이터(자체) 3가지 카테고리로 나누어 보다 체계적으로 분류하였으며, 제시된 분류에 따라 각 상황별 위험도에 기반하여 정량적으로 계산할 수 있도록 새로운 측정 방법을 제안하였다. 제안한 방법은 기존의 비식별 정보의 위험도 산정을 전문가들의 정성적 판단에만 맡기는 것이 아니라 일반조직 내 개인정보처리자가 실무에 활용할 수 있도록 정량적인 방법으로 위험도를 산정할 수 있도록 설계하였다.
Abstract
This paper proposes a new measurement scheme for estimating the processing level according to risk when performingde-identification in the use of personal information by practitioners in the organization in line with the recently revised Data3 Act. Our proposed methods considered the surrounding circumstances surrounding the data, not just the data, for riskmeasurement, and divided the data situation into three categories more systematically so that it can be applied in all areasin a general-purpose environment, the data utilization environment, and the data (self) so that it can be calculatedquantitatively based on each context risk according to the presented classification. The proposed method is designed tocalculate the risk of existing de-identifiable information in a quantitative manner so that personal information controller ingeneral organizations can use it in practice, not just in the qualitative judgment of experts.
참고문헌 (18)
- Functional Anonymisation: The crucial role of the data environment in determining the classification of data as (non-)personal, "Elliot, M. J.", CMIST, ~ (2015)
- Sweeney L, "k-anonymity: A model for protecting privacy", International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems, 10(3) (2002)
- The anonymisation decision making framework, "UKAN", ~ (2016)
- Mackey, E, "Understanding the Data Environment", XRDS: Crossroads, 20(1), pp.37~39 (2016)
- Duncan, G. T, "Statistical Confidentiality" (2011), Springer
- Khaled El Eman, "Guide to the De-identification of Personal Health Information", pp.203~221 (2013), CRC Press
- "HITRUST and Privacy Analytics, HITRUST Data De-identification Methodology, Training course material", ~ (2019)
- "NIST 800-188(2nd Draft)De-Identifying Government Datasets", ~ (2016)
- Joint government departments in Korea, "Guidelines for de-identification of personal information", ~ (2016)
- Nissenbaum HF, "Privacy in Context:technology, policy, and the integrity of social life, Stanford, California" (2010), Stanford Law Books
- Bieker F, "A process for data protection impact assessment under the european general data protection regulation", Lecture notes in computer science, pp.21~37 (2016)
- Mulligan DK, "Privacy is an essentially contested concept: a multi-dimensional analytic for mapping privacy", Philos Trans Ser A Math Phys Eng Sci, 374(2083), pp.1~17 (2016)
- Solove DJ, "A taxonomy of privacy", Univ Pa Law Rev, 154(3), pp.477~564 (2006)
- Khaled El Emam, "Risk-based de-identification of health data", IEEE Security & Privacy, 8(3), pp.64~67 (2010)
- Khaled El Emam, "Anonymizing health data", pp.29~33 (2013), O’Reilly book
- Fabian Prasser, "Methods of Information in Medicine" (2016), Schattauer
- Oleksandr Tomashchuk, "International Conference on Trust and Privacy in Digital Business, TrustBus 2019", pp.63~77 (2019)
- "HIPAA(Health Insurance Portability and Accountability Act) Privacy Rule", ~ (2012)