The Limitations on the Use of Big Data Pursuant to Data Privacy Regulations in Korea

다국어 초록 (Multilingual Abstract)

This study provides an overview of the current big data industry and regulatory parameters in Korea. It also makes policy and legislative recommendations for stimulating the big data industry, while preserving a balance between industry growth and the privacy of data subjects. For this purpose, we begin by reviewing privacy legislations from the European Union, the United States, and Japan. We also present domestic and overseas data breach cases. Further, we study relevant Korean court precedents and Korean privacy legislations to pinpoint obstacles to the promotion of big data under the current legislative regime.
South Korea’s thorough privacy protection regulations essentially rival those of Europe. As of 2017, key privacy policy legislations applicable in Korea are given under the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilisation and Information Protection, etc., and the Act on the Use and Protection of Credit Information, etc.
Because Korean privacy legislations define “identifiability” vaguely, businesses that employ big data technology face uncertainty about how to comply with various statutes and regulations, and this uncertainty restricts their production and use of big data.
Korean privacy legislations generally require personal information processors to acquire opt-in consents from data subjects to collect, use, and give third parties personal information. As a result, acquiring advance opt-in consents is necessary to generate big data from information that contains personal information.
Legislative direction that stimulates the big data industry must strike a fine balance between the constitutional rights to privacy and consumers’ rights (i.e., the data subject of collected personal information) and the property rights of companies that own such information (i.e., big data companies). On the one hand, legislative changes extracting one-sided concessions from individuals about their privacy will likely be met with public resistance. On the other hand, continuing with laws that hamper the growth of the big data industry will undoubtedly sideline Korea from the fourth industrial revolution. Hence, scholars, legislators, and legal professionals must explore comprehensive measures that reconcile these two perspectives.

참고문헌 (Reference)

1 박정훈, "잊혀질 권리와 표현의 자유, 그리고 정보프라이버시" 한국비교공법학회 14 (14): 569-602, 2013

2 차상육, "빅데이터의 활용에 따른 개인정보보호법제와의 충돌과 과제" 한양법학회 27 (27): 315-359, 2016

3 손영화, "빅데이터 시대의 개인정보 보호방안" 한국기업법학회 28 (28): 355-393, 2014

4 이창범, "개인정보보호법제 관점에서 본 빅데이터의 활용과 보호 방안" 법학연구소 37 (37): 509-559, 2013

5 "Suwon District Court [Dist. Ct] 2015Ga-Hap1847, Aug. 31, 2017"

6 "Supreme Court [S. Ct.], 99Hun-Ma513, May 26, 2005"

7 "Supreme Court [S. Ct.], 2016Do13263, April 7, 2017"

8 "Supreme Court [S. Ct.], 2014Da235080, Aug. 17, 2016"

9 "Supreme Court ([S. Ct.], 2013Da43994, Feb. 12, 2015)"

10 "Seoul High Courts [Seoul High Ct.], 2015Na2065729, July 26, 2017"

11 "Seoul Central District Court [Dist. Ct.], 2010Go-Dan5343, Feb. 23, 2011"

12 "Seoul Central District Court ([Dist. Ct.], 2012Ga-Hab81628, Aug. 22, 2014)"

13 "Kojin Jōhō No Hogo Nikansuru Hōritsu [Act on the Protection of Personalized Information], Law No. 57 of 2003"

14 Byungjoo Kim, "KakaoBaengkeuui Iyu Inneun Chogi Heunghaeng Dolpung [Why Kakao Bank Has Had Such Great Early Success]"

15 Kakao Corp., "Kakao Corporation and Subsidiaries: Half-Year Financial Report for 2017"

16 "Kakao Corp. 2nd Quarter 2017 Results"

17 "Jeongbotongshinmang Iyongchokjin Mit Jeongboboho Deunge Gwanhan Beobryul [Act on Promotion of Information and Communications Network Utilisation and Information Protection, Etc.], Act No. 6360, Jan. 16, 2001, amended by Act No. 10560, April 5, 2011, art. 2"

18 "Jeongbotongshinmang Iyongchokjin Mit Jeongboboho Deunge Gwanhan Beobryul Sihaengryung [Enforcement Decree on the Act on Promotion of Information and Communications Network Utilisation and Information Protection, Etc.], Presidential Decree No. 23169, Sept. 29, 2011, amended by Presidential Decree No. 23876, June 25, 2012, art. 12"

19 Hojoon Song, "Ingongjineung AI Bikdeiteo Chasedae Gichoyeongu Jiwoneuro Sacha Saneophyeongmyeonui Gibaneul Teunteunhi Handa [Strengthening the Foundation of the Fourth Industrial Revolution through Supporting Fundamental Research of AI and Big Data]" Ministry of Science and ICT

20 Taemin Song, "Ilbonui Bikdeiteo Peuraibeosi Bohobangan [Japan’s Privacy Protection Measures Regarding Big Data]" Kor. Inst. for Health and Soc. Affairs 210 : 90-, 2014

21 "Gartner IT Glossary: Big Data"

22 Seunghoon Kim, "Gangseogu 1-eok Neomneun Jeongchaek Saeop Bikdeiteo Bunseok Sajeonhyeobuije [Gangseogu’s Pre-Consultation Policy for Big Data Analysis for Projects Exceeding 100 Million Won]" Seoul PN

23 "Gaeinjeongbo Bohobeob [Personal Information Protection Act], Act No. 10465, Mar. 29, 2011, amended by Act No. 14839, July 26, 2017"

24 "Gaeinjeongbo Bohobeob Sihaengryung [Enforcement Decree of the Personal Information Protection Act], Presidential Decree No. 28355, Oct. 17, 2017, art. 17"

25 Yoonmi Kim, "Bisikbyeol Jochi Donghyang Mitgungnae Jeogyongeul Wihan Sisajeon Dochul [Foreign De-identification Trends and Drawing Implications for Domestic Implementation]" 5 : 2-, 2017

26 Hyeyong Yang, "Bikdeiteouirul Whalyonghan Gisulgiwheok Bangbeoplon [Methodology of Technology Planning Utilising Big Data]" Kor. Inst. of Sci. & Tech. Evaluation and Planning 1-, 2012

27 Sukjin Yoon, "(Bisikbyeoljeongbo Hwaryong Nollan) (1) Jeongbu “Bikdeiteo Hwalseongwha” vs. Simindanche “Gaeinjeongbo Chimhae” [(The Issue that Arises from the Utilisation of Big Data) (1) Government “Vitalising the Use of Big Data” vs. Civic Group “Violation of Privacy”]"