It was argued that the Data 3 Act (Personal Information Protection Act, Credit Information Act, and Information and Communication Network Act) should strengthen the independence of the Personal Information Protection Committee ahead of full-scale enforcement on August 5th.
Attorney Kim Bora-mi (Kyung-Sil Kyung) emphasized this in a discussion forum on amendments to the Enforcement Decree of the Data 3 Act held on the 29th.
“We have sympathized with the need for an independent committee while preparing for the EU GDPR adequacy assessment,” said Kim. “This was not reflected properly.”
“The Financial Information Commission took the authority not only to a simple financial company but also to a general company, while the Financial Information Commission prepared amendments to the Credit Information Act, and the independence of the Personal Information Protection Committee was broken.” He must be in a position to command and must have leadership in pursuing the Data 3 Act, such as coordinating and improving the overlap between the Personal Information Protection Act and the Credit Information Act. ”
Choi Gyeong-jin, professor of law at Gachon University, said, “The Personal Information Protection Committee has to take various roles and cover not only law interpretation and consistent law application but also post-regulation.” “We need to secure it, and if necessary, we need to support the budget and manpower.”
The industry pointed out that the government's amendment to the Enforcement Decree of the Data 3 Act, which was released last month, should be revised to reduce the burden on businesses.
“Currently, the legal punishment related to the processing of pseudonym information among the contents of the Data 3 Act has been strengthened,” said Wook-Jae Lee, managing director of KCB. “SMEs and start-ups that do not have a personal information protection system manage pseudonym information in accordance with personal information, so it may be burdensome to require investment or human resources expansion.” Because pseudonym information has already de-identified personal information In order to reasonably establish protection measures, it is necessary to prepare enforcement regulations and enforcement rules. ”
It was also argued that unnecessary physical space should be minimized when combining pseudonym information.
“The applicant for the combination of pseudonym information required that the combined information be analyzed in a space where physical measures were taken,” said Kim Jae-hwan, director of the Internet Business Association. “It is difficult to process quickly because it causes damage and takes time.”
Lee said, “Since the process of combining and exporting is simplified, the time and cost are shortened.” “The enterprise also brings data into the enterprise and applies new technologies such as AI to improve the business. This is why we cannot achieve the expected effect. ”
The debate on this day was held by the Ministry of Public Administration and Security, the Korea Communications Commission, and the Financial Services Commission last month to announce amendments to the Enforcement Decree of the Data 3 Act, and listen to opinions from various fields. Corona19 According to the social distance policy, Naver TV and Kakao TV were broadcast live online. The number of replays was over 20,000, and more than 300 comments were poured. The government will finalize the final decree by collecting industry opinions by May 11th.
Staff Reporter Kim Ji-sun firstname.lastname@example.org