지원사업
학술연구/단체지원/교육 등 연구자 활동을 지속하도록 DBpia가 지원하고 있어요.
커뮤니티
연구자들이 자신의 연구와 전문성을 널리 알리고, 새로운 협력의 기회를 만들 수 있는 네트워킹 공간이에요.
초록· 키워드
오류제보하기
Under data breach notification law, person or business who owns or licenses data that includes personal information is required to notify the data subject of the breach of the security system of personal information. Since the enactment of California's data breach notification law in 2003, other forty five states of the United States have legislated notification law. Korea adopted data breach notification law under which a personal information controller is supposed to notify the subject of the breach. While Korea's legislation is expected to improve practices of personal information protection, it would be more effective with some amendments. This paper suggests some proposals to improve the operation of data breach notification in Korea. First, publicly available information that is lawfully made available to the general public from government needs to be excluded from the scope of personal information, although its definition is flexible enough to cover new types of sensitive personal information. Second, encryption exemption is necessary so that the controller may not be required to notify the breach if data which includes personal information has been encrypted. It will create incentives to adopt encryption, improving practices of protection, and would alleviate burden on the controller. Third, Korea's legislation should require, in addition to the acquisition of personal information by a third party, an additional element of harm to trigger notification. This additional element will limit unnecessary notification of breach, preventing the subject from becoming desensitized to notification with over-notification.
목차
등록된 정보가 없습니다.
참고문헌 (19)
참고문헌 신청
Abraham Shaw / 2010 / Data Breach: From Notification to Prevention Using PCI DSS / COLUM. J. L. & SOC. PROBS 43 : 517 ~
Amanda C. Border / 2012 / Untangling the Web: An Argument for Com- prehensive Data Privacy Legislation in the United States / SUFFOLK TRANSNAT’L L. REV 35 : 363 ~
Brendan St. Amant / 2007 / The Misplaced Role of Identity Theft in Triggering Public Notice of Database Breaches / HARV. J. LEGIS 44 : 505 ~
Flora J. Garcia / 2007 / Data Protection, Breach Notification, and the Interplay between State and Federal Law: The Experiments Need More Time / FORDHAM INTEL. PROP. MEDIA &a
Gideon Emcee Christian / 2009 / A New Approach to Data Security Breaches / CAN. J. L. & TECH 7 : 149 ~
Amanda C. Border / 2012 / Untangling the Web: An Argument for Com- prehensive Data Privacy Legislation in the United States / SUFFOLK TRANSNAT’L L. REV 35 : 363 ~
Brendan St. Amant / 2007 / The Misplaced Role of Identity Theft in Triggering Public Notice of Database Breaches / HARV. J. LEGIS 44 : 505 ~
Flora J. Garcia / 2007 / Data Protection, Breach Notification, and the Interplay between State and Federal Law: The Experiments Need More Time / FORDHAM INTEL. PROP. MEDIA &a
Gideon Emcee Christian / 2009 / A New Approach to Data Security Breaches / CAN. J. L. & TECH 7 : 149 ~
이 논문의 저자 정보
최근 본 자료
댓글(0)
0