개인정보의 법적·기술적 특성을 고려한 라이프 사이클(Life Cycle) 모델

다국어 초록 (Multilingual Abstract)

This study reviews the life cycle models considering legal and technical characteristics of personal data respectively. Based on the reviews, this research proposes consent and management based model of personal data which is applicable to the domestic IT companies. The model suggested in this paper has characteristics that Consent and Management factors are ㅁpositively considered, which is overlooked in the other models. The validity of the model is examined by two methods, validation of the model of excellence by contrast of the other models, and consent and management factors cover all the life cycle processes. Using this model, IT companies will be contributed to the analysis of the personal data utilization and the development of IT system protection.

참고문헌 (Reference)

1 한국인터넷진흥원, "｢개인정보법｣ 조문별설명자료"

2 한국정보통신기술협회, "정보통신 단체 표준 개인정보 생명주기별 보안 관리모델" 2007

3 홍승필, "유비쿼터스 컴퓨팅 환경내 개인정보보호 프레임워크 적용 방안" 한국정보보호학회 16 (16): 157-164, 2006

4 한국정보사회진흥원, "신 가치창출 엔진,빅 데이터의 새로운 가능성과 대응 전략" IT and Future Strategy (18) : 1-29, 2011

5 한창희, "기업의 개인정보 유출로 인한 경제적 피해규모 산출방법" 한국전자거래학회 16 (16): 17-31, 2011

6 행정안전부, "공공 기관개인정보 영향평가 수행안내서"

7 한국정보보호진흥원, "개인정보의 안전한수집, 저장 및 관리, 이용, 제공, 파기를위한 개인정보 관리모델 연구" 2006

8 방송통신위원회, "개인정보의 기술적․관리적 보호조치 기준(제2011-01호)"

9 손형섭, "개인정보보호법제에 관한 입법평가" 한국법제연구원 2008

10 한국인터넷진흥원, "개인정보보호관리 체계인증준비 안내서(사업자용)"

11 한국인터넷진흥원, "개인정보보호 프레임워크 개발"

12 장인주, "개인정보보호 강화를 위한 동적 보안수준 결정" 한국전자거래학회 17 (17): 137-150, 2012

13 한국정보보호진흥원, "개인정보 영향 평가기준 정비 방안에 관한 연구" 2005

14 정보통신부, "u-프라이버시 환경 구축을위한 개인정보보호기술 개발 추진 방향(중장기 기술개발 계획(안))" 2005

15 Jendricke, U, "Usability Meets Security-the Identity Manager as Your Personal Security Assistant for the Internet" 344-353, 2000

16 "U.S. Department of Commerce(DOC)"

17 International Security, "Trust, and Privacy Alliance(ISTPA)" org/ISTPA

18 Peng, H, "Towards Compliance and Accountability : A Framework for Privacy Online" 4 (4): 494-504, 2009

19 Information Commissioner’s office, "The ICO Privacy Impact Assessment Hand book" 2007

20 Aquilina, K, "Public security versus privacy in technology law : A balancing act?" 26 (26): 130-141, 2010

21 Clarke, R, "Privacy impact assessment : Its origins and development" 25 : 123-135, 2009

22 Williams, M, "Privacy Management" 60-67, 2009

23 Homeland Security, "Privacy Impact Assessments: The Privacy Office OfficialGuidance"

24 Office of the New Zealand Privacy Commissioner, "Privacy Impact Assessment Handbook" 2002

25 The Treasury Board Secretariat of Canada, "Privacy Impact Assessment Guidelines : A Framework to Manage Privacy Risks" 2007

26 Office of the Privacy Commissioner(Australian Government, "Privacy Impact Assessment Guide" 2006

27 Nilsson, M, "Privacy Enhancements in the Mobile Internet" 2001

28 Boneh, D, "PORTIA : Privacy, Obligations, and Rights in Technologies of Information Assessment" 27 : 10-18, 2004

29 Jafari-Lafti, M, "P2F : A User-Centric Privacy Protection Framework" Reliability and Security 386-391, 2009

30 Laudon, K. C, "Management Information Systems : Managing the Digital firm" Pearson 2011

31 Perkel, J, "How safe are your data? Many scientists want to keep their data and resources free; cyber security specialists want them under lock and key" 464 (464): 1260-1261, 2010

32 Kang, Y, "Classification of Privacy Enhancing Technologies on Life-cycle of Information" Systems and Technologies, IEEE 66-70, 2007

33 APEC, "APEC Privacy Framework"

34 Meziane, H, "A dynamic privacy model for web services" 32 : 288-304, 2010

35 Weider D, "A Privacy Assessment Approach for Serviced Oriented Architecture Applications" 67-75, 2006