개정 신용정보법의 개인정보보호 관련 연구와 개선방안

It is no exaggeration to say that the Data 3 Act safely utilizes data and provides a legal basis for implementing digital New Deal policies. This is because the development of the data industry through the Data 3 Act can utilize personal information of individual people in various services. However, the scope of its use is so wide that it is not easy for the general public to grasp the use of their personal information. In addition, while the technology and management methods of personal information use are developing day by day, attempts to abuse and abuse are also increasing. With massive hacking attempts and cyber attacks targeting personal information becoming more frequent, countries around the world are struggling to protect their own information and discussions on strengthening personal information protection are continuing. In Korea, the enactment and revision of laws related to personal information protection have been repeated in recent years, and various legislative proposals and legislative amendments have been continuously discussed. In order to promote the utilization of public data that can be expanded after the implementation of the Data 3 Act, the information subject must create a reliable environment. To this end, the procedures should be specified so that the rights of the information subject prescribed in the Personal Information Protection Act or the rights of the information subject guaranteed by each related law can be guaranteed as much as possible, and the rights of the information subject should be materialized so that the information subject can easily exercise the rights. Also, even if each data is provided or pseudonymized, it should give confidence that the protection of personal information of the information subject is firmly done. To this end, management and supervision of a pseudonym processing should be strengthened, and standards and procedures should be kept transparent. Only when the data is provided and utilized according to the transparency and due process, the harmony between the rights of the information subject and the safe use can be realized. The data economy has a great industrial significance, as the data industry itself can generate huge additional revenue, but it can also serve as an innovation industry catalyst. Therefore, many foreign countries have already established many laws and systems on data and are leading. For the lagging country, it is necessary for the government and the private sector to jointly combine the heaps to catch up with the overseas countries where the data industry is activated. By benchmarking the success stories of various data industry activation policies abroad, government regulations should establish a more stable security system and encourage companies to revitalize their industries voluntarily. If the direction of government policy and legislation is not consistently presented, it is highly likely that the development of the data industry and the protection of the rights of the people will become a problem. Individuals should be able to exercise self- determination as the final decision maker based on self-responsibility, and companies should respect individual self-determination as the subject of data utilization.