In Korea, 「Act on the Development of Cloud Computing and Protection of its Users」 has been enforced since September 28, 2015. Many countries implemented ‘Cloud First’ policies and global companies such as Amazon, Microsoft, IBM started cloud services in Korea. Under these circumstance, the Act was established for developing the cloud computing industry. The Act includes clauses for encouraging the use of private cloud computing by public organizations, supporting small- and medium-size cloud service providers, and utilizing secure cloud computing services by users. However, some terms appear to be similar but have different meanings from 「Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.」 and 「Personal Information Protection Act」. This generated some confusion and conflicts in relation to providing user information to a 3rd party and notifying the intrusion in the Cloud Computing Act. This paper discusses these issues and suggestions for revision of the Cloud Computing Act.
목차
Abstract 1. 서론 2. 관련 법률 검토 2.1 클라우드컴퓨팅 발전 및 이용자 보호에관한 법률 2.2 정보통신망 이용촉진 및 정보보호 등에관한 법률 2.3 개인정보보호법 2.4 3개 법률 간의 관계 3. 클라우드컴퓨팅법 쟁점 및 개선방안 3.1 이용자 정보(제2조 제4호) 3.2 이용자 정보의 보호(제27조) 3.3 전산시설 등의 구비(제21조) 3.4 침해사고 등의 통지 등(제25조) 4. 결론 References
키워드
Information ProtectionInformation PrivacyInformation SecurityCloud ServiceCloud Computing Act
저자
이정구 [ Jung Koo Lee | Korea HPE Education Center ]
민대환 [ Daihwan Min | Digital Management Department, Korea University Sejong Campus, Korea University Sejong Campus 2511 Sejong-ro, Sejong City, 30019, Korea ]
Corresponding author
권헌영 [ Hun Yeong Kwon | Graduate School of Information Security, Korea University ]