A framework for calculating damages of personal information leakage accidents

Abstract

Victims of personal information leakage accidents have not been adequately compensated, and large-scale leakage accidents are occurring, which is becoming a serious social problem. In this study, the causes of the personal information leakage accidents that continue to occur are due to insufficient compensations for victims and lower costs to be borne by the companies. This resulted in the loss of the enterprise’s reason for investing in information security, which in turn led to an average low security level. Therefore, we analyze the cases of personal information leakage accidents in Korea and present a framework for calculating damages.