개인정보 국외이전 관련 EU GDPR 위반 사례 분석 및 기업에의 시사점 = Study on Breach Cases of EU GDPR on Cross-border Transfer of Personal Data and Its Implications for Firms

다국어 초록 (Multilingual Abstract)

This study conducts a case analysis on four breach cases of EU GDPR on cross-border transfer of personal data, and derives implications for both EU and non-EU firms subject to the GDPR. All of the four cases took place in the course of business activities between EU controller firms and non-EU processer firms whose country has not received the adequacy decision by the European Data Protection Board(EDPB), All four processor firms belong to the information and communication industry such as telemarketing, image reading, and education service support. This case analysis is of great significance in that it can capture some significant phenomena of cross-border transfer of personal data that may occur frequently in the wave of increasing digital goods and services trade. In order to comply with the GDPR, EU controller firms should check all personal data transfers through a review of existing or planned business operations, and pay more attention to ensure that the firm is equipped with a proper data transfer mechanism. In this regards, each controller firm should have so called ‘personal data protection governance' which works as a central data protection system for customer response and crisis management. Non-EU processor firms should actively communicate with EU controller firms, strengthen training for in-house workers in relation to personal data protection, and secure organizational, technical methods or means to verify pre-filtering in customer data management.

참고문헌 (Reference)

1 김현경, "유럽의 개인정보보호 지침(GDPR)과 시사점 – GDPR 적정성 결정을 위한 입법 과제를 중심으로" 생명보험협회 490 (490): 2019

2 우기훈 ; 신성식, "디지털무역 자유화와 개인정보보호의 무역 제한적 요소에 대한 연구 : EU GDPR을 중심으로" 한국무역학회 45 (45): 71-89, 2020

3 대한민국 정책브리핑, "개인정보보호 관련 국제협력 성과 브리핑"

4 고보민, "개인정보 국외이전 관련 규범 국제 동향 분석 및 한국에의 시사점" 한국무역학회 46 (46): 239-255, 2021

5 "The European Union"

6 "KOTRA 세계시장 진출전략 2021 유럽"

7 "KISA 최신이슈분석"

8 "KISA 최신이슈분석"

9 "KISA 위반 및 과징금 부과 사례"

10 "KISA 발표자료"

11 "KISA GDPR"

12 "KISA 2020 GDPR 상담사례집"

13 "KISA 2020 EU 일반개인정보보호법(GDPR) 가이드북"

14 "GDPR Enforcement Tracker"

15 이한영, "EU 개인정보 역외이전 규제의 GATS 양립성이 국내 상호주의 법안에 주는 정책 시사점" 한국국제통상학회 24 (24): 111-143, 2019

16 이규엽, "EU GDPR 위반사례의 분석과 시사점" 대외경제정책연구원 2020

17 최경진, "EU GDPR 분석 및 시사점" NAVER 2016

18 고보민, "A Comparative Study of Consumer Trust in Major Digital Trade Agreements" 한국무역연구원 17 (17): 147-165, 2021