Asia-pacific Journal of Law, Politics and Administration
| Volume 2, No. 2, 2018, pp 13-32 | ||
| Abstract |
A Study on the Information Security Management Index through Analysis of EU-GDPR(European Union-General Data Protection Regulation)
|
|
Abstract
The European Commission is committed to ensuring the free movement of personal information between EU Member States and strengthening the protection of the privacy of information by EU Member States through the EU General Regulations 2016/679 (General Data Protection Regulation: 'GDPR'), which entered into force on May 24, 2016, and have taken effect on May 25, 2018, and will have direct application and legal binding power to all EU Member States. Companies that are servicing the EU or preparing for business need to have a good understanding of the GDPR compliance requirements and need to comply with the relevant regulatory requirements.This study compares the legal core requirements between GDPR and domestic law, compares and analyzes the control items of ISMS (Information Security Management System & PIMS: Personal Information Management System) with the requirements of GDPR, and suggests ways to prepare a response system.