개인정보 유출 사고와 정보통신서비스 제공자의 책임

• 영문명: Data Breach and the Liability of the Service Provider - The Supreme Court Decision 2015Da24904, 24928, 24935, Dated January 25, 2018 -
• 발행기관: 충북대학교 법학연구소
• 저자명: 이소은(Lee, So Eun)
• 간행물 정보: 『법학연구』第29卷 第2號, 553~593쪽, 전체 41쪽
• 주제분류: 법학 > 법학
• 파일형태: PDF
• 발행일자: 2018.12.30

영문 초록

This paper studies the tort liability of the service provider in the data breach cases, focusing on the recent decision of the Korean Supreme Court, the Supreme Court Decision 2015Da24904, 24928, 24935, dated January 25, 2018. The decision has drawn much attention, as the data breach at issue involved personal data of more than 30 million people. The decision gives an answer to the question if the court may recognize the service provider’s negligence in a data breach case, even though the service provider had been complying with the relevant statutes. The Supreme Court states that the regulations set the minimum standards for the protective measures the service provider shall implement. As such, the compliance with the regulations does not necessarily exempts the service provider from civil liability. If the service provider has not taken the reasonable measure which it is expected to and apparently ought to take, it shall be liable for the damages. The decision also touches upon the issue of causation in a data breach case. Any internet service is bound to have vulnerabilities, somewhere in the multilayer, interrelated network system. It is of course very difficult to spot the vulnerability through which the hacker trespassed the system, and understand the course of hacking that actually led to the data leakage. The decision does not explore the causation issue as in depth as it does the negligence issue, but it still provides a rare opportunity to contemplate on whether and how much strict the burden of proof shall be imposed on the plaintiff.

목차

[대상판결]

Ⅰ. 사실관계

Ⅱ. 소송의 경과

Ⅲ. 대법원의 판단

[연구]

Ⅰ. 서론

Ⅱ. 정보통신서비스 제공자의 주의의무

Ⅲ. 정보통신서비스 제공자의 과실과 유출 사고 사이의 인과관계

Ⅳ. 결론

키워드

개인정보 유출 정보통신서비스 제공자 과실 판단 불법행위 정보통신망법 Data breach Data leakage Data protection Tort liability Liability of service provider