KBS 9시 뉴스 정문호 변호사 인터뷰, 고객 위치정보 수집 시 법 위반 행위에도 방통위 고발하지 않고 | |||
---|---|---|---|
7월 10일 KBS 9시 뉴스에서 보도된 현대기아차에서 고객 위치정보 수집 시 법 위반 행위를 한 경우, 방송통신위원회에서 고발하지 않고 과징금 부과 처분한 것에 대한 인터뷰 내용입니다. [앵커] 통신망에 연결된 커넥티드카 서비스는 주차 공간 안내 등 각종 편의를 운전자에게 제공합니다. 이 과정에서 민감한 개인 정보까지 수집했지만, 현대차그룹은 이런 사실을 서비스 가입자에게 제대로 고지하지 않았고, 이를 조사한 방통위는 솜방망이 처분을 내렸습니다. 최창봉 기자입니다. 이렇게 적힌 단말기를 통해 각종 운행정보가 서버에 전송되는데 기아차도 마찬가지입니다. 어떤 정보들이 전송될까? 카드번호, 계좌 등 가입자 정보, 목적지, 주행일자 등 GPS 정보, 차량상태와 보험내역, 심지어 좌석 세팅값까지 모았습니다. 이런 정보를 수집할 경우 가입자에게 제대로 알려야는데, 그러지 않았습니다. 누가 정보를 이용하는지, 자료 보유기간은 얼만지 등을 알리지 않은 겁니다. 서비스를 탈퇴하면 즉시 정보를 폐기해야 하는데 약관엔 5년 보유한다고 돼 있습니다. [정문호/변호사 : "회원이 탈퇴한 이후에도 장기간 보유하는 것은 입법 목적이라든가 판례와 배치될 수 있습니다."] 조사를 벌인 방통위는 고발이나 수사 의뢰 없이, 과징금과 과태료 처분에 그쳤습니다. 고의나 중대한 과실로 볼 수 없다, 사용자에게 미치는 피해가 확인되지 않았다는 이유입니다. [출처 KBS 9시 뉴스 인터뷰 발췌본]
|
Previous post | 베트남에서 실무상 소규모 사업 투자 진출 형태와 문제점 및 소규모 사업의 주요 업종별 법인 설립 |
---|---|
Next post | 김용욱 변호사 한강유역물관리위원회 위원 위촉 |
JP Law Firm (the "JP") establishes and publishes a privacy policy (the "This Policy") to protect the privacy and interests of the subjects of infromation and to facilitate the handling of the grievances of the subjects of information in accordance with the relevant laws.
Article 1 [Management of items of personal information, purpose of management, and retention period of personal information]
① Items of personal information, purpose of management, management, and retention period of personal information managed by JP are as follows:
[Mandatory] : Name, date of birth, contacts (address, telephone number, e-mail, etc.) photos, gender, educational background, history and training, experience, motivation, and self-introduction
[Optional] : Information and notes on family matters, awards, foreign language and qualifications and licenses, and other submission documents
[Mandatory] : Name, date of birth, contact (address, telephone number, e-mail, etc.) photo, gender, educational background, history and training, experience, motivation, and self-introduction
[Optional] : Information and notes on family matters, awards, foreign language and qualifications and licenses, and other submission documents
② JP does not collect sensitive information that may infringe upon the privacy of the subject of information, and if necessary, collects it with separate consent from the subject of information and uses it only for the consented purpose. However, JP checks the accuracy and updates sensitive information periodically.
Article 2 [Disclose personal information to a third party]
① In principle, the personal information of the subject of information is managed within the scope of purposes specified in Article 1, and the personal information shall not be managed beyond the original scope or shall not be disclosed to a third party without prior consent of the subject of information. However, in the following cases, personal information may be disclosed for other purposes or disclose to a third party, only when the subject of information or third party's interests may be infringed substantially and unfairly.
② When JP obtains consent under paragraph 1., JP shall inform the subject of information the following matters. If any of the following changes are made, JP informs and obtains consent from the informant/subject of information:
Article 4 [Rights and obligations of the subject of information and methods of execution]
① The subject of information can exercise its right to protect his/her personal information, such as requiring the access limits, correction, deletion and suspension of personal information, as provided under the applicable laws, such as the Personal Information Protection Act.
② The exercise of rights under paragraph 1 may be conducted either by the legal representative of the subject of information/informant or by a person who has been authorized. However, in case where authorized person exercises the right to protect personal information on behalf of subject of information/informant, proper power of attorney shall be submitted to the JP according to the Enforcement Rules of the Personal Information Protection Act.
③ With respect to exercise of subject of information/informant, JP will take immediate action according to applicable laws, such as the Personal Information Protection Act.
Article 5 [Destruction of personal information]
① In principle, when personal information is not necessary, such as when the purpose of managing personal information has been achieved, JP destroys the personal information.
② To comply with applicable law, in case where JP must retain the personal infromation, JP retains the personal information separately from other personal information.
③ JP weeds the personal information out if the personal information raises causes of destruction after JP obtains approval from the person in charge of personal information protection (management).
④ If the personal information to be destroyed is in electronic file form, JP shall destroy permanently in a way that cannot be restored. For other forms; records, printed materials, written materials, and other recording media are shredded or burn.
Article 6 [Measures to secure the safety of personal information]
JP is taking necessary steps to ensure the safety as follows:
Article 7 [Changing the privacy policy]
his policy can be changed according to the applicable laws, guidelines, internal, and regulations of JP, and in case where this privacy policy is changed, the timing of change, and the changes will be disclosed on the website (http://www.jplaws.com/). The changes will be compared as before and after changed for comfortable reading of the subject of information.
Article 8 [Remedies for infringement of rights]
If you need to report or consult a personal information violation, please contact the following agency:
Article 9 [Personal Information Protection Director]
All contents of this website are for the purpose of introducing a law firm and are not provided for legal advice or interpretation of specific matters.
If you use our website, please consult our legal counsel before taking any actions based on the contents on this website.
In addition, other websites and materials linked to this website are provided for the convenience of users. Based on the contents posted on our website, we will declare once again that we are not responsible for the consequences of any act or omission.