• Annual Conference of KIPS
• /
• 2018.10a
• /
• pp.300-303
• /
• 2018

유럽연합(EU)의 GPDR(개인정보보호일반규정)시행에 따라 개인정보를 활용하는 사업자 입장에서는 개인정보 보호도 중요하지만 활용측면에 더 많은 관심을 보이고 있다. 개인정보 보호와 활용에 따른 균형점을 찾는 제도적 정착을 위해 개인정보 이동권에 대한 요구가 생겼다. 국내 개인정보 관련 법률에는 아직 근거가 없으며 개인정보처리자의 독립적 데이터 보유에 따른 책임 강화와 정보주체가 자신의 데이터를 관리하는 권리를 가지고 데이터 활용을 할 수 있는 개인정보 자기결정권이 더 요구된다. 이에 따라 본 논문에서는 GDPR의 개인정보 이동권에 대한 현황 및 준수사항을 알아보고 각 나라별 개인정보 이동(data portability)에 따른 개인정보 활용방안과 고려사항을 제시하고자 한다. 개인정보이동에 한 형태로 국내 마이데이터 시범 사업이 정착하기 위한 법칙, 기술적 대응사항을 제시하고자 한다.

• Informatization Policy
• /
• v.28 no.4
• /
• pp.54-75
• /
• 2021

The right to data portability needs to be introduced to strengthen the self-control of data subjects and promote personal data use. However, the right to data portability constitutes a high risk of invasion of privacy of data subjects and may infringe on the property rights of data controllers, so careful and thorough design is warranted. The right to data portability can intensify the concentration and monopoly of personal data, result in problems of overseas transfer of personal data held by public institutions, and enrich only the profits of giant platforms by burdening the data subject with high transfer cost. By contrast, SMEs are more likely to endure a personal data deprivation. From the proposed amendment to the Personal Data Protection Act are raised various legal issues such as. i) Whether to include inferred/derived data, personal data held by public institutions, activity data, sensitive data, and personal data of third parties within the scope of data portability; ii) whether SMEs are included in the data porting organization; iii) whether to exclude SMEs or large platforms from the scope of the data receiving organization; iv) Whether to allow the right to transmit to other data controllers, v) Whether to allow the overseas transfer of personal data held by public institutions, vi) How to safely exercise the right to data portability, vii) the scope of responsibility and immunity of a data porting organization, etc. The purpose of this paper is to propose the direction for legislative action based on various legal issues related to data portability.

• The Korean Society of Law and Medicine
• /
• v.24 no.2
• /
• pp.35-77
• /
• 2023

As the amendment to the Personal Information Protection Act, which newly established the basis for the right to request transmission of personal information, was promulgated through the plenary session of the National Assembly, MyData, which was previously applied only to the financial sector, could spread to all fields. The right to request transmission of personal information is the right of the information subject to be guaranteed for the realization of MyData. However, since the right to request transmission of personal information stipulated in the Personal Information Protection Act is designed to be applied to all fields, not a special field such as the medical field, it has many shortcomings to act as a core basis for implementing MyData in Medicine. Based on this awareness of the problem, this paper compares and analyzes major legal trends related to the right to portability of personal health information at home and abroad, and examines the limitations of Korea's Personal Information Protection Act and Medical Act in realizing Medical MyData. Under the Personal Information Protection Act, the right to request transmission of personal information is insufficient to apply to the medical field, such as the scope of information to be transmitted, the transmission method, and the scope of the person obligated to perform the transmission, etc.. Regulations on the right to access medical information and transmission of medical records under the Medical Act also have limitations in implementing the full function of Medical My Data in that the target information and the leading institution are very limited. In order to overcome these limitations, this paper prepared a separate and independent special law to regulate matters related to the use and protection of personal health information as a measure to improve the legal system that can effectively guarantee the right to portability of personal health information, taking into account the specificity of the medical field. It was proposed to specifically regulate the contents of the movement and transmission system of personal health information.

• Journal of Internet Computing and Services
• /
• v.23 no.6
• /
• pp.49-58
• /
• 2022

As military service members are fully permitted to use mobile phones for sickness after work, it is time to minimize the direct collection of personal information from telecommunication companies when opening mobile phones to secure the safety of military service personnel's personal information. Prior to introducing the use of mobile phones by soldiers after work, the Ministry of National Defense established a security control system such as blocking the mobile phone shooting function to prevent security accidents and concerns about some adverse functions such as illegal cyber gambling, game addiction, and viewing pornography. come. Mobile telecommunications companies entrust personal information processing tasks, such as opening mobile phones, to telecommunications agencies and carry out management and supervision, such as checking the status of personal information protection measures. When a military service member opens a mobile phone, a personal information management agency is newly established using the right to portability of personal information, and a system for requesting the transmission of personal information from the military service member is proposed.

• Industry Promotion Research
• /
• v.9 no.1
• /
• pp.47-55
• /
• 2024

In the transportation sector, reducing total vehicle mileage and passenger vehicle traffic are proposed as strategies to achieve carbon neutrality. To achieve this, MaaS services must be actively promoted with the goal of revitalizing public transportation. In order to promote MaaS, individual movement data is required, such as the individual's means of movement, route, and conversion of the individual's means of use. However, in Korea, there are legal limitations in collecting and utilizing data on individual movements. As the right to request transmission of personal information was newly established in the revised Personal Information Protection Act in 2023, a law was established to collect and utilize data on individual movements. However, enforcement ordinance, detailed rules, instructions, guidelines must be prepared, and the standardization of data format and transmission system for collecting my data needs to take precedence.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.29 no.5
• /
• pp.1205-1219
• /
• 2019

As the ability to use data becomes competitive power in the data-driven economy, the effort to create economic value by using personal data is emphasized as much as to protect personal data. EU's PSD2(the second Payment Service directive) became the initiative of the Open Banking trends all over the world, as it is the Mydata policy which protects the data subject's right by empowering the subject to control over the personal data with the right to data portability and promotes personal data usages and transfer. Korean government is now fast adopting EU's PSD2 in financial sector, but there is growing concerns in personal data abuse and misuse, and data breach. This study analyzes domestic financial Mydata policy in comparison with EU's PSD2 and focus on Personal information life-cycle risks of financial Mydata policy. Some suggestions on how to promote personal information and privacy in domestic financial Mydata Policy will be given.

• Industry Promotion Research
• /
• v.9 no.3
• /
• pp.163-174
• /
• 2024

MyData is a new entity that strengthens the rights of information subjects through the 'right to data portability' and utilizes data to enable hyper-personalized services using personal information. Korea's MyData system is recognized globally as an outstanding system in that it is creating a new MyData industry by granting the right to information self-determination through the 'right to request data transmission'. Now in its third year, this study evaluates Korea's MyData system from a consumer behavior perspective and identifies issues for improvement. To this end, this study reviewed previous research on the relationship between regulatory policy and consumer behavior to determine the applicability of a consumer behavior perspective in institutional evaluation. In addition, in a study on consumer behavior related to MyData, variables that affect the use of MyData were investigated and evaluation items from a consumer behavior perspective were derived. As a result of evaluating Korea's MyData system from a consumer behavior perspective, it was found that the factors considered important by consumers were appropriately reflected in the system. However, in cases where there are dual values of ease of use and personal information protection, regulatory aspects tend to take priority. Therefore, in order to revitalize the MyData industry, it is essential to implement market-friendly system improvements without compromising consumer rights. This study is differentiated from existing studies in that it attempted to derive a plan for system improvement by combining empirical consumer behavior research and regulatory policy research.

• Review of KIISC
• /
• v.21 no.3
• /
• pp.51-54
• /
• 2011

개인적으로 모바일 분야에 입문한지 어느새 13년차가 되었다. 처음 흑백 휴대폰의 브라우저에서 사진이 뜨는 것을 확인하고 감격에 겨워하던 그 시절이 그립기도 하다. 하지만, 99년 이후 WAP과 WIPI로 대변되던 지난 10년간 이동통신사 중심의 국내 모바일 인터넷은 폐쇄적으로 운영되어 이전 세대의 PC통신과 다를 바 없는 비슷한 시기였다. 그 시절에도 국내 이동통신사들은 망사업자(Dummy Pipe)가 아닌 서비스 사업자 또는 플랫폼 사업자로 거듭나기 위한 원대한 꿈을 꾸고 있었다. 비록, 그들이 최근의 이동통신 시장 변화를 주도적으로 열지는 못했지만, 다양한 분야의 국내 서비스 사업자에게는 신속하게 스마트 디바이스 인프라를 널리 보급하고 있다는 점에서 더 없이 환영할 일이라고 본다. 지금부터 보안이라는 관점에서 스마트 시대를 어떻게 준비하고 활용할 것인지에 대해서 얘기해 보려고 한다.

• KIPS Transactions on Software and Data Engineering
• /
• v.12 no.10
• /
• pp.437-444
• /
• 2023

Location-based services play a vital role in our daily lives. While these services enhance user convenience, user's privacy is at risk because they lead to a rapid surge in collecting and utilizing location information for a user. In this paper, we design and implement an application that securely records and manages user location information. We enhance the privacy protection aspect concerning location information by providing some features. Utilizing Room DB, we store collected personal location information in the user's local database instead of the server of the location-based service provider. Furthermore, user can initiate and terminate recording at their discretion, thereby enhancing the protection of personal information related to location data. User's unease regarding their movement paths is reduced by empowering them to have control over their own location information.

• Proceedings of the Korean Information Science Society Conference
• /
• 2006.06c
• /
• pp.259-261
• /
• 2006

이동 단말기, 무선인터넷 기술, 센서 기술의 발달로 인한 유비쿼터스 환경의 등장은 사용자의 위치에 상관없이 자유롭게 네트워크에 접속하여 다양한 서비스 이용과 정보 공유를 가능하게 하였다. 따라서 원할한 정보 공유와 서비스 이용을 위해서는 사용자에 대한 정보 보호 기술이 요구되어 진다. 또한 이런 유비쿼터스 환경에서의 프라이버시 정보는 개인의 동의 없이도 노출될 수 있으며, 제 3자에 의해 공유되거나 또는 악용적으로도 이용될 수 있다. 이에 본 논문에서는 유비쿼터스 환경 내에서 사용자의 프라이버시를 보장하기 위해 사용자에게 프라이버시 정보에 대한 배타적인 통제권을 부여함으로써 사용자 편의성이 제공되는 개인에 의한 RBAC 기반의 접근 제어 프레임워크를 제안한다.