제3자의 행위에 의한 개인정보침해사고로 발생한 손해배상책임의 합리적 배분

In the case of damages caused by personal information infringement accidents caused by information infringer such ashackers, the information subject will usually claim damages to the information controller rather than the information infringerwho is the perpetrator, and the information controller who has been claimed will claim damages again to the informationsecurity enterprise that has entrusted the information protection business. These series of claims for damages, which areexpected to be carried out between the information subject, the information controller and the information security enterprise,are nothing but quarrels for transferring of liability among themselves who are also victims of infringement. So the problemof damage compensation should be discussed from the perspective of multi-faceted rational distribution of the damagesamong the subjects who make up the information security industry ecosystem rather than the conventional approach. Inaddition, due to the nature of personal information infringement accidents, if a large amount of personal informationinfringement occurs, the amount of compensation can be large enough to affect the survival of the company and so this