개인정보보호법과 EU의 GDPR에서의 프라이버시 보호에 관한 연구

The era of the 4th Industrial Revolution is an epoch when information becomes a resource and power by the advancement of information and communication technology. And personal information(data) is an important axis for this information flow. And personal information(data) is an important axis for this information flow. However, if the personal information is used only well, it is a means of providing the best service for the pursuit of happiness of the data subject, but if it is abused, it can lead to serious privacy invasion and disturb human dignity and worthiness. So personal information(data) is like a double-edged sword. It is necessary to make a policy effort to maximize the pure function and to minimize the dysfunction. Meanwhile, the EU has enacted a statutory GDPR for the efficient operation of the personal and information functions, and all member countries will implement it from May 25, 2018. In this paper, I study on the EU's GDPR(including data protection impact assessments; DPIAs) and compare with Korea’s Personal Information Protection Act for the protection of the self-determination right and the right of knowing which are basic rights of the people effectively in response to the 4th Industrial Revolution era.