미국의 개인정보보호법제에 대한 분석과 시사점 = Some Analyses on the Legal Regime of Data Protection in the United States

다국어 초록 (Multilingual Abstract)

The current United States legal regime of data protection can be characterized by a sort of dual and sectoral system. The "dual" means that the personal data in the public and private sectors are protected by the distinct protection laws respectively. The "sectoral" means that there is no comprehensive data protection law in the private sector. In this sense, the current Korean legal regime is similar to the United States. But the two countries are very different in that the United States has had a strict and efficient regulatory system of data protection for a long time in the public sector while it has focused on some sort of market-centered self-regulation in the private sector.
This article describes the United States legal regime of data protection, especially the enforcement system in the public and private sectors, and then picks out some suggestive points for the Korean regime. Chapter II considers the United States dual and sectoral legislative system and its theoretical background. Chapter III describes the current, various data protection laws in the United States, Chapter IV analyzes the enforcement system of the public sector in the federal level. Chapter V explains the enforcement system of the private sector in the federal level.
The suggestive points for the Korean data protection regime are as follows:
First, the suggestive significance of the United States differentiated approach between public and private sectors consists in the difference of philosophy and protection level in both sectors. In fact, since the dangers of privacy violations in the public sector are higher than in the private sector, the public one need to have more strict regulatory regime than the private one. The current Korean regime is out of balance between the both sectors. The Korean data protection mechanisms in the public one is feeble and insufficient.
Second, the American Privacy Act regulates the common use of records through the method of computer matching between two agencies. But the Korean counterpart Act does not regulate the computer matching.
Third, the United States data protection regime in the private sector have made best use of the market-centered self-regulation while recognizing the value and necessity of processing consumer's data. The Korean regime should not depend heavily upon the public regulatory mechanism in the private sector.

목차 (Table of Contents)

• Ⅰ. 머리말
• Ⅱ. 이원적·부문별 입법모델과 그 이론적 배경
• 1. 공공부문에서의 엄격한 공법적 규제
• 2. 민간부문에서의 시장중심의 부문별 규제
• Ⅲ. 보호입법의 체계와 현황
• Ⅳ. 공공부문의 집행체계
• 1. 개별 공공기관의 시행책임과 집행규칙의 공표
• 2. 공공기관 내부의 1차적인 권리구제절차
• 3. 관리예산처에 의한 외부감독 및 지원
• 4. 컴퓨터결합에 대한 특별집행절차
• 5. 프라이버시영향평가제도
• Ⅴ. 민간부문의 집행체계
• 1. 소비자정도 부문의 집행체계
• 2. 의료정보 부문의 집행체계
• Ⅵ. 시사점 : 결론을 대신하여