Haksoo Ko et al., Collection of User Data through Mobile Devices in South Korea using ADID: Current Status and Legal Implications, The Justice, Vol. 180 (2020), pp. 442-486.
<Abstract>
We empirically examined the status of user information collection and user tracking across the mobile apps widely used in Korea. According to our investigation, 820 apps, or 92.6% of 886 apps analyzed, are transmitting advertising identifiers (ADID) to several server domains. This finding suggests the possibility of extensive user tracking through advertising identifiers in the mobile app ecosystem. In addition, we found that user information collected through mobile apps is concentrated on a small number of overseas operators. Furthermore, the sampling survey confirmed that information about users is being collected along with advertising identifiers. Based on the results of such empirical investigation, this study considered whether such practice of collecting advertising identifiers is likely to impose substantial privacy threat and if any, what risks exist. Despite potential privacy threats, however, there is no clear legal regulatory regime in Korea concerning the collection of advertising identifier information and user tracking. In particular, it is unclear whether the current Personal Information Protection Act could be applied to this matter, and there are several difficulties in interpreting laws related to pseudonymized information. The findings of this study are expected to serve as the basis for further discussions to explore appropriate regulation on advertising identifiers and will contribute to triggering discussions on this subject.
<Keyword>
Advertising identifier, ADID, User tracking, Behavioral information, Personal Information Protection Act
Haksoo Ko et al., Collection of User Data through Mobile Devices in South Korea using ADID: Current Status and Legal Implications, The Justice, Vol. 180 (2020), pp. 442-486.
<Abstract>
We empirically examined the status of user information collection and user tracking across the mobile apps widely used in Korea. According to our investigation, 820 apps, or 92.6% of 886 apps analyzed, are transmitting advertising identifiers (ADID) to several server domains. This finding suggests the possibility of extensive user tracking through advertising identifiers in the mobile app ecosystem. In addition, we found that user information collected through mobile apps is concentrated on a small number of overseas operators. Furthermore, the sampling survey confirmed that information about users is being collected along with advertising identifiers. Based on the results of such empirical investigation, this study considered whether such practice of collecting advertising identifiers is likely to impose substantial privacy threat and if any, what risks exist. Despite potential privacy threats, however, there is no clear legal regulatory regime in Korea concerning the collection of advertising identifier information and user tracking. In particular, it is unclear whether the current Personal Information Protection Act could be applied to this matter, and there are several difficulties in interpreting laws related to pseudonymized information. The findings of this study are expected to serve as the basis for further discussions to explore appropriate regulation on advertising identifiers and will contribute to triggering discussions on this subject.
<Keyword>
Advertising identifier, ADID, User tracking, Behavioral information, Personal Information Protection Act