데이터 상업화 과정으로서의 개인정보 비식별화 = Commercialization Process by De-identification on Personal Data

다국어 초록 (Multilingual Abstract)

This paper aims at legal and socio-scientific analysis of the de-identification of personal data, which is referred to as a ‘hot issue’ of the current ICT sector. Even if the de-identifying personal data, which is called core technology of Big Data, is still in a problematic state, problems are covered with Big Data craze thanks to the so-called ‘creative economy’ backing of ‘Park Geun-hye’ regime and are not properly discussed in domestic academia. This is why I am writing. The first part of this article reviews the commercialization of data. I diagnose the blue ocean Big Data is dreaming, and new possibilities created by data recycling, focusing on recent changes and typical examples. In the middle part of this article, I allot concentrated analysis of the de-identification on personal data. Firstly, through the analysis of the data which are the very subject of de-identification process, I reveal that the reality of de-identification is technical measures intended to circumvent the legal regulations for personal data protection. Then I point out that the de-identification process promoted by the Korean government raises a serious concern because de-identification already includes the possibility of re-identification. To do this, I examine the related US cases and analyze how the term is used in various countries. Finally, I review the immanent limit of Big Data. Also, I review the danger of data processing, demonstrating the weaknesses of Big Data analysis that it does not consider the discrimination and exclusion from itself. In the last part of this article, I criticize the situation of domestic discourse on Big Data being in progress on the contaminated soil, and express the fear that the current data protection mechanisms would soon be faced with a great confusion in the new digital era.

참고문헌 (Reference)

1 구태언, "현행 개인정보보호 법제상 ‘개인정보’ 정의의 문제점" 개인정보보호법제 개선을 위한 정책제안서, 프라이버시 정책연구 포럼 : 34 ~ 45, 2013

2 구태언, "영상, 위치, 생체정보 등 개인정보를 활용한 신기술의 사생활 침해 이슈와 대응방안" 신기술 확산에 따른 개인정보 침해 대응방안 토론회 : 1 ~ 38, 2015

3 오길영, "빅 데이터 환경과 개인정보의 보호방안 – 정보주체의 관점에서 바라본 비판적 검토를 중심으로 -" 일감법학 (27) : 155 ~ 188, 2013

4 빅토르 마이어 쇤버거, "데이터는 알고 있다. 빅 데이터가 만드는 세상" 21세기북스, 2013

5 오길영, "‘클라우드컴퓨팅 발전 및 이용자 보호에 관한 법률안’의 검토와 비판" 민주법학 (56) : 247 ~ 276, 2014

6 Richards, Neil M., "Three Paradoxes of Big Data" Stanford Law Review Online 66 : 41 ~ 46, 2013

7 Levy, Karen E. C., "Relational Big Data" Stanford Law Review Online 66 : 73 ~ 79, 2013

8 Federal Trade Commission, "Protecting Consumer Privacy in an Era of Rapid Change" 2012

9 Clarke, Roger, "Profiling: A Hidden Challenge to the Regulation of Data Surveillance" Journal of Law, Information and Science 4 (2) : 403 ~ 419, 1993

10 Tene, Omer, "Privacy in the Age of Big Data: a Time For Big Decisions" Stanford Law Review Online 64 : 63 ~ 69, 2012

11 Kerr, Ian, "Prediction, Preemption, Presumption: How Bid Data Threatens Big Picture Privacy" Stanford Law Review Online 65 : 65 ~ 72, 2013

12 Dwork, Cynthia, "It’s not Privacy, and It’s not Fair" Stanford Law Review Online 66 : 35 ~ 40, 2013

13 McCallister, Erika, "Guide to Protecting the Confidentiality of Personally Identifiable Information (PII)" 2010

14 Ginsberg, Jeremy, "Detecting influenza epidemics using search engine query data" Nature 457 : 1012 ~ 1014, 2009

15 Ferraris, V., "Defining Profiling" 2013

16 Jerome, Joseph W., "Buying and Selling Privacy: Big Data’s Different Burdens and Benefits" Stanford Law Review Online 66 : 47 ~ 53, 2013

17 Ohm, Paul, "Broken Promises of Privacy: Responding to the Surprising Failure of Anonymization" UCLA Law Review 57 : 1701 ~ 1777, 2010

18 Lerman, Jonas, "Big Data and Its Exclusions" Stanford Law Review Online 66 : 55 ~ 63, 2013

19 Information Commissioner’s Office, "Anonymisation: managing data protection risk code of practice" 2012