영국의 개인정보보호 법제와 개인정보 보호기관의 법적 실태에 관한 소고

다국어 초록 (Multilingual Abstract)

In the UK, the definition of personal information is data which relates to a living individual who can be identified from that information, or from that data and other information which is in the possession of, or is likely to come into the possession of, the data controller. Sensitive personal data concerns the subject’s race, ethnicity, politics, religion, trade union status, health, sex life, or criminal record. The UK Data Protection Act (DPA) is a large Act that has a reputation for complexity. While the basic principles are honored for protecting privacy, interpreting the Act is not always simple. Until now, little research was done regarding DPA and thus only some limited literature can be available at hand. And even that does not read excepted code and few article. Many companies, organizations, agencies and individuals seem very unsure of the aims, content and principles of the DPA. Some hide behind the Act and refuse to provide even very basic, publicly available material quoting the Act as a restriction. The Act also impacts on the way in which organizations conduct business in terms of who can be contacted for marketing purposes, not only by telephone and direct mail, but also electronically and has led to the development of permission based marketing strategies.
Personal data which is normally held for under 40 days may be legitimately denied in subject access requests under the Act. This is a consequence of the time limit data controllers must meet in making their response. If the data has been deleted by the normal procedures of the business by the time the data controller responds to a request, that data cannot be supplied. For data such as closed-circuit television images which are routinely overwritten, it may be impossible for a subject to exercise their data access rights. Much time has passed since the Act adopted by Congress and Commissioner have experienced cases management. Thus, if we carefully examined the Act, I usually believe and find that there is something to learn behind the Act. The story and case the handled in the UK may bring useful suggestion to Korean academic society as well as legislative and judicial branch.

참고문헌 (Reference)

1 이민영, "해외 개인정보보호 집행체계 및 개인정보보호 주요 동향조사" 개인정보보호법학회 2012

2 최경진, "영국의 개인정보보호법 －일반원칙 및 정보주체의 권리를 중심으로－" 한국정보법학회 13 (13): 211-236, 2009

3 김종호, "금융기관이 수집한 고객정보의 제3자 제공에 관한 법적 고찰" 법학연구소 24 (24): 173-227, 2013

4 황종성, "국외 개인정보 보호법제 분석 및 시사점" 한국전산원 3-, 2004

5 유한나, "국내 개인정보보호법의 발전방향 제시를 위한 국외 개인정보보호법 분석" 한국정보보호학회 22 (22): 1091-1102, 2012

6 윤주희, "개인정보의 범위에 관한 연구" 개인정보보호위원회 141-, 2014

7 김준우, "개인정보보호법제에 대한 소고: 개인정보보호법 및 신용정보법을 중심으로" 법학연구소 47 (47): 43-80, 2012

8 홍범석, "개인정보보호 관련 규제체계와 주요 이슈" 25 (25): 73-, 2013

9 정영화, "개인정보보호 감독기구 도입을 위한 법제도 개선방안 연구" 한국정보보호센터 166-, 2000

10 寺西香澄, "英国における CCTV 等の 取扱い及 びオランダにおけるマネー・ロンダリング対策" (282) : 2008

11 青柳武彦, "情報化時代の プライバシー研究－個の 尊厳と 公共性の 調和に 向けて" NTT 出版部 263-, 2008

12 Dominic Casciani, "Q&A: The national DNA database"

13 Ursula Smartt, "Media and Entertainment Law" 245-, 2011

14 David Bainbridge, "Introduction to Computer Law" Pearson Education Ltd 430-, 2005

15 岡久慶, "IDカード法－國家情報の 綜合管理" (229) : 158-, 2006

16 Bryan Niblett, "Data Protection Act 1984" Oyez Longman 1-, 1984

17 Hazel Grant, "Data Protection 1998-2008"

18 Jim Vaught, "Biobank Business Planning and Economic Impact"

19 Timothy Caulfield, "A review of the key issues associated with the commercialization of biobanks" 94-110, 2014

20 Sarah Webb, "A new right of privacy following the House of Lords decision in Naomi Campbell v. MGN Limited?" 2 (2): 30-40, 2004