정보주체의 권리 실효성 확보를 위한 법적 검토 - 개인정보에 대한 소유권 인정을 중심으로 -

The basis of the rights of information subjects under the current law is the right to self-determination of personal information as a personal right. However, the current personal information processing environment is not limited to these personal rights, and the economic value of personal information is actively utilized. Considering the development of information technology and the effect of the processing of personal information on the data subject, the stage of guaranteeing the rights of the data subject can be divided into three stages as follows. It can be said to be the stage of defensive rights centered on the right to privacy, the stage of participatory rights to guarantee the decision-making rights of information subjects, and the stage of guaranteeing active use and profit rights beyond participatory rights. The current level of rights of data subjects is the second stage, that is, the stage of guaranteeing ‘participatory rights’ in the processing of personal information. The basis of the rights of information subjects under the current law is the right to self-determination of personal information as a personal right. However, the current personal information processing environment is not limited to these personal rights, and the economic value of personal information is actively utilized. Considering the development of information technology and the effect of the processing of personal information on the data subject, the stage of guaranteeing the rights of the data subject can be divided into three stages as follows. It can be said to be the stage of defensive rights centered on the right to privacy, the stage of participatory rights to guarantee the decision-making rights of information subjects, and the stage of guaranteeing active use and profit rights beyond participatory rights. The current level of rights of data subjects is the second stage, that is, the stage of guaranteeing ‘participatory rights’ in the processing of personal information. However, there is an increasing demand for three-level rights, such as the discussion of ownership of personal information and the need to realize the economic value of the data subject. However, it is questionable whether the data subject’s rights are being properly exercised in accordance with this environment. This is because the rights of data subjects in our personal information protection law system are focused only on the ‘right to consent’ of the data subjects, so they are still lukewarm about the ways to materialize other rights or the rights that reflect the data subjects’ will to pursue profits. Therefore, in this study, the limits of the rights of information subjects under the current law at the second level are explored, and whether it is possible to recognize active and exclusive property rights over personal information, that is, whether it is appropriate to recognize ownership of personal information, is reviewed. First of all, in view of the theory of property rights, the creation of ownership of personal information has limitations in ‘control’, ‘protection’, ‘value measurement’, and ‘subject to property’ of personal information when personal information is treated as property. Therefore, it is necessary to find an institutional way to realize the participatory right and utilize property values ​​even if it does not reach active property rights. As a way to support the implementation of participatory rights, it is proposed to encourage services or businesses that support the improvement of the information privacy protection capacity of personal information controllers and the realization of the rights of data subjects. In addition, as a way to institutionalize the management of the property value of personal information, it was proposed to use the personal information management agency (My Data), which is currently scheduled to be introduced in the amendment of the Personal Information Protection Act, and to introduce the ‘trust-like personal information management business’.