개인정보 보호 관점에서 본 보건의료 빅데이터의 안전한 활용방안

Abstract

Health and medical big data can be established in the development or improvement of new medical technologies, the development of the biopharmaceutical industry, and the government’s health and medical policies, so the necessity is fully recognized. However, if the focus is only on the utility of health care big data and the development of the medical industry, privacy violations due to the possibility of re-identification that individual information providers are concerned about, and lack of ethical considerations for individual autonomy in the data collection process can be problematic. These two conflicting purposes, how to harmonize the use of big data and personal information protection, are the biggest topics of use of big data in health care. In the case of information that forms the basis of big health care data, sensitive information accounts for the majority, so in principle, consent from the information subject is required to collect and utilize it. Nevertheless, the current Personal Information Protection Act does not distinguish the type of information, does not recognize the control of the information subject in the processing of pseudonym information, and excludes various rights and obligations to protect personal information. Since additional information exists as a kind of personal information, there is no room for the information subject to control personal information as it can be used for industrial purposes without individual consent, even though it can be clearly identified if pseudonymised data and additional information are combined. Therefore, various measures that can be reviewed to protect the personal information of the information subject in the use of health care information under the current law are examined focusing on the legislative case of the EU GDPR. First of all, we will examine the possibility of introducing a device that guarantees the rights of the information subject to pseudonym information. In addition, from the perspective of safe use of big data in health care, it is intended to strengthen the autonomous protection system for acquiring trust in information subjects and to prepare a system to implement effective pre- and post-big data protection impact assessment.