• 정보보호학회논문지
• /
• 제26권4호
• /
• pp.1013-1023
• /
• 2016

국내 현행법상 개인정보 국외이전은 정보통신망법과 개인정보보호법에서 정보주체의 동의하에 국외이전을 허용하여 왔다. 하지만 최근 IT기술의 발달과 더불어 다국적 기업들의 국내 진출, 클라우드 활성화, FTA 협정 등을 통해 국가간 개인정보이전이 증가하는 가운데 현행 규제는 개인정보 국외이전에 뚜렷한 방향성을 제시하지 못한다. 개인정보의 국외 이전 활성화는 국제협력 강화와 개인정보의 유통을 기반으로 하는 금융, 인터넷, 전자상거래 등 다양한 산업의 발전에 기여하는 바가 크며, 변화하는 정보통신기술 환경에 필수적인 요건이다. 따라서 개인정보의 보호의 원칙을 고수하며 개인정보의 해외 이전에 유연하게 대처하기 위해서는 새로운 개인정보이전 체계 마련에 대한 논의가 필요하다. 본 연구는 현행 개인정보 국외이전 법규의 한계와 새로운 제도의 필요성을 검토하고, 유럽의 개인정보 국외이전 사례 분석을 통해 정책 대안을 제시한다.

• 정보화정책
• /
• 제28권4호
• /
• pp.54-75
• /
• 2021

정보 이동권은 정보주체의 개인정보 자기통제권 강화뿐만 아니라 개인정보 활용 촉진이라는 측면에서도 도입 필요성이 인정된다. 그러나 정보 이동권은 정보주체의 프라이버시 침해 위험이 크고 개인정보처리자의 정보 재산권을 침해할 수 있어 신중한 설계가 필요하다. 정보 이동권이 심각한 개인정보 집중 및 독점 문제를 더욱 심화시킬 수 있고, 공공정보의 무분별한 국외이전을 야기할 수 있으며, 정보주체에게 이전 비용을 부담지움으로써 거대 플랫폼기업 등의 수익만 챙겨주는 결과를 가져올 수 있다. 반면, 중소기업들은 더욱 더 개인정보 기근에 빠져들 가능성이 없지 않다. 입법 예고 중인 「개인정보 보호법」 개정안과 관련해서는 i) 이동 대상 정보에 추론·파생 정보, 공공정보, 메타정보, 행동정보, 민감정보, 제3자 정보 등을 포함시킬지 여부, ii) 정보 이동의무를 지는 정보 이동자의 범위에서 중소기업, 공공기관 등을 포함시킬지 여부, iii) 정보를 이전받을 수 있는 정보 수령자의 범위에서 중소사업자 또는 거대 플랫폼기업을 배제할지 여부, iv) 정보 이전 요구권(다운로드권 등) 이외에 전송 지시권을 허용할지 여부, v) 공공정보의 국외이전 문제, vi) 정보 이동권의 안전한 행사, vii) 정보 이동자의 책임범위 및 면책 등 다양한 이슈가 제기되고 있다. 본고는 GDPR, CCPA, S-PDPA 등과의 비교 분석을 통해 앞에서 제기된 여러 법적 이슈에 대한 입법방향을 제시하고자 한다.

• 한국IT서비스학회지
• /
• 제22권6호
• /
• pp.1-15
• /
• 2023

This study compares and analyzes the legal systems of Korea, the European Union, China, and the United States based on the disclosure principles and processing policies for personal data processing and provides references for seeking improvements in our legal system. Furthermore, this research aims to suggest institutional implications to overcome data transfer limitations in the upcoming digital economy. Findings on a comparative analysis of the relevant legal systems for disclosing privacy policies in four countries showed that Korea's privacy policy is under the eight principles of privacy proposed by the OECD. However, there are limitations in the current situation where personal information is increasingly transferred overseas due to direct international trade e-commerce. On the other hand, the European Union enacted the General Data Protection Regulation (GDPR) in 2016 and emphasized the transfer of personal information under the Privacy Policy. China also showed differences in the inclusion of required items in its privacy policy based on its values and principles regarding transferring personal information and handling sensitive information. The U.S. CPRA amended §1798.135 of the CCPA to add a section on the processing of sensitive information, requiring companies to disclose how they limit the use of sensitive information and limit the use of such data, thereby strengthening the protection of data providers' rights to sensitive information. Thus, we should review our privacy policies to specify detailed standards for the privacy policy items required by data providers in the era of digital economy and digital commerce. In addition, privacy-related organizations and stakeholders should analyze the legal systems and items related to the principles of personal data disclosure and privacy policies in major countries so that personal data providers can be more conveniently and accurately informed about processing their personal information.

• 무역학회지
• /
• 제46권6호
• /
• pp.239-255
• /
• 2021

To review the theoretical background of regulatory approaches to cross-border transfer of personal data, this paper divides major digital trade participating countries into four types according to the OECD - non-regulatory, post-intervention, pre-supervision, and national control. It then analyzes the US, Japan, the EU, and China respectively that belong to each type. South Korea, which is currently about to pass the amendment by the National Assembly, has identified that it is in the middle of post-intervention and pre-supervision, and needs to evolve into pre-supervision norms like the EU while it has to participate more actively in the process of establishing international digital trade rules. Korea first needs to sign digital trade agreements and promote mutual certification projects more actively from the standpoint of a medium-sized open country with growing digital companies and digitally-open consumers. Second, the government should fully consider the interests of not only companies but also various trade stakeholders including domestic consumers, when drafting and implementing trade policies. To this end, 'a single window approach' is needed not only at the Ministry of Trade, Industry, and Energy, but also at the level of the entire government which require an integrated form of digital trade policy governance.

• 수산해양교육연구
• /
• 제28권2호
• /
• pp.366-375
• /
• 2016

The purpose of this research is to describe the experiences of transfer students in nursing colleges. This study was based on the qualitative content analysis. To collect qualitative data, 10 personal interviews were conducted from June 2013 to September 2014. Five sub-themes emerged from the data as follows: Participants started new challenge with self-confidence; Nursing science was difficult and unfamiliar disciplines to them; Firstly, they had no place in nursing department, but got places of their own over time; They managed to hold their own in confronting with difficulties; They consequently made personal upgrades in their life. The results of this study could guide nursing faculties to understand what kind of burdens transfer students experienced, how they had adapted to them, and how to support them to realize their full potential to grow into competent nurses.

• Journal of Electrical Engineering and Technology
• /
• 제8권6호
• /
• pp.1559-1570
• /
• 2013

The family of ISO/IEEE11073 standards is the basis of the e-health system and provides interoperability for personal health devices. In the early stage of e-health business, it was expected that people would use a health device individually. In this case, a measurement datum was episodically acquired and generally transmitted for one person at a time. Recently, a health device is expected to be used by multiple people, and large amounts of measurement data are gathered in a short time interval. In addition, mobile health devices have become more popular, so that energy efficient measurement data transmission is required, to prolong the use of a device. In IEEE11073 PHD standards, data transmission is classified into three different types: immediate individual transfer, small block transfer, and large block transfer. The large block transfer using PM-store concept provides efficient transmission. However, an existing PM-store has problem when a device is used by multiple people. To address the defined problem, a modified PM-segment that is in compliance with 11073 standards is proposed in this paper. In particular, the proposed PM-segment is designed to minimize the additional complexity of an agent instead of a manager and it is interoperable with the existing manager. The proposed PM-segment shows better performance than the existing PM-segment, in terms of memory requirements and expected queue time. Also, performance comparison among the three transfers is performed in regard to the delay time and communication power consumption points of view.

• 가족자원경영과 정책
• /
• 제5권2호
• /
• pp.13-27
• /
• 2001

The purpose of this study was to analyze which factor, influenced their change from pre-wage group to family business group. The subject of study classified by wage earner group and family business group. Independent variables effected by transform to family business group are classified by personal variables and workable variables. The major findings of this study are as followings: Sex, age, marriage of personal variables and pre-work time, pre-wage, wholesale - retail business, restaurant business and person service business of pre-industry of work variables had significant effect on transform to family business. Especially, Marriage group and low pre-wage income group significant effected on transfer to family business. By this, personal to transfer to family business can conjugate information of search and choice decision and can be used as a valuable data for future family business study.

• 정보보호학회논문지
• /
• 제29권5호
• /
• pp.1205-1219
• /
• 2019

데이터 기반 경제시대에서 데이터 활용능력이 경쟁력이 됨에 따라 개인정보의 보호와 더불어 개인정보의 활용을 통한 경제적 부가가치를 창출하려는 노력이 함께 강조되고 있다. 이 가운데 등장한 EU의 PSD2(the second Payment Service Directive)는 정보 주체의 '정보이동권'을 근거로 개인의 자기결정권을 보장하면서 데이터의 활용과 유통을 촉진하는 마이데이터 정책으로 전 세계 오픈뱅킹 정책의 시초가 되고 있다. 이러한 추세에 따라 우리나라 정부도 국내 금융업권별 실정을 반영하여 마이데이터 정책을 적극적으로 추진하고 있다. 하지만, 마이데이터 정책으로 인해 금융정보의 유통 및 활용 범위가 커진 만큼 개인정보의 유출 및 오남용, 해킹 등 위험도 커진 것도 사실이다. 본 연구에서는 EU PSD2가 어떻게 국내 금융분야 마이데이터 정책에 반영되어 추진되고 있는지를 살펴본다. 그리고 국내 마이데이터 정책의 개인정보보호 위험 사항을 개인정보 생명 주기별로 나누어 식별한 후 이러한 위험에 대한 법적 기술적 대응책을 제시하고자 한다.

• 정보보호학회논문지
• /
• 제26권4호
• /
• pp.995-1012
• /
• 2016

IoT 환경에서는 사람들이 인지할 수 없는 다수의 사물들이 자율적으로 데이터를 수집하고 수집된 데이터들은 네트워크를 통해 서로 결합되고 공유될 수 있다. 이로 인해 IoT 상에서는 개인정보보호 측면에서 기존의 IT 환경 대비 새로운 도전 과제들이 존재하게 된다. 본 연구는 IoT 환경에서 발생 가능한 개인정보보호 관련 이슈를 파악하고 이에 대한 대응 방안을 제안하는 것을 목적으로 한다. 본 연구에서는 IoT에서의 다양한 개인정보처리자의 유형들을 분석하고, 개인정보처리자 측면과 정보주체 권리 및 개인정보보호 측면에서의 주요 이슈를 도출하였다. 분석된 이슈를 바탕으로 필요한 제도적 개선 방안(사용자 친화적 고지방안 및 탄력적 동의제도 마련, 개인정보 재식별 위험 모니터링 체계 정립, 국외이전 개인정보보호 표준계약제도 수립, 이용자 교육 강화 등)을 제안하고, 개선안들에 대한 시급성과 중요도를 검토하여 우선적으로 추진해야 할 개선과제가 무엇인지 제시하였다.

• 의료법학
• /
• 제13권1호
• /
• pp.359-395
• /
• 2012

In a broad term, health and medical data means all patient information that has been generated or circulated in government health and medical policies, such as medical research and public health, and all sorts of health and medical fields as well as patients' personal data, referred as medical data (filled out as medical record forms) by medical institutions. The kinds of health and medical data in medical records are prescribed by Articles on required medical data and the terms of recordkeeping in the Enforcement Decree of the Medical Service Act. As EMR, OCS, LIS, telemedicine and u-health emerges, sharing and protecting digital health and medical data is at issue in these days. At medical institutions, health and medical data, such as medical records, is classified as "sensitive information" and thus is protected strictly. However, due to the circulative property of information, health and medical data can be public as well as being private. The legal grounds of health and medical data as such are based on the right to informational self-determination, which is one of the fundamental rights derived from the Constitution. In there, patients' rights to refuse the collection of information, to control recordkeeping (to demand access, correction or deletion) and to control using and sharing of information are rooted. In any processing of health and medical data, such as generating, recording, storing, using or disposing, privacy can be violated in many ways, including the leakage, forgery, falsification or abuse of information. That is why laws, such as the Medical Service Act and the Personal Data Protection Law, and the Guideline for Protection of Personal Data at Medical Institutions (by the Ministry of Health and Welfare) provide for technical, physical, administrative and legal safeguards on those who handle personal data (health and medical information-processing personnel and medical institutions). The Personal Data Protection Law provides for the collection, use and sharing of personal data, and the regulation thereon, the disposal of information, the means of receiving consent, and the regulation of processing of personal data. On the contrary, health and medical data can be inspected or delivered of the copies, based on the principle of restriction on fundamental rights prescribed by the Constitution. For instance, Article 21(Access to Record) of the Medical Service Act, and the Personal Data Protection Law prescribe self-disclosure, the release of information by family members or by laws, the exchange of medical data due to patient transfer, the secondary use of medical data, such as medical research, and the release of information and the release of information required by the Personal Data Protection Law.