'ID is name, password 1234'... National Human Rights Commission says "Negligence in personal information protection at Transportation Vulnerable Mobility Support Center"

Gwangju Metropolitan City 'Saebit Call' Complaint
User Phone Numbers and Movement Paths Stored on Staff PCs
Human Rights Commission Recommends Institutional Warning and Inspection

[Asia Economy Reporter Lee Gwan-joo] The National Human Rights Commission has recommended thorough management, supervision, and inspection of personal information protection regarding the inadequate personal information management of the Saebit Call system, a call control system of the Gwangju Metropolitan City Transportation Vulnerable Mobility Support Center.

On the 17th, the Human Rights Commission announced that it issued a warning to the Gwangju Mayor regarding the Mobility Support Center and recommended the Chairperson of the Personal Information Protection Commission to conduct an inspection of the personal information protection status at the Mobility Support Center.

The complainant filed a petition with the Human Rights Commission, claiming that the Gwangju Transportation Vulnerable Mobility Support Center was abusing access rights to personal information while operating the 'Saebit Call' system used for consultation and dispatch. In response, the center stated to the Human Rights Commission that "we operate a personal information protection policy in accordance with the 'Act on the Protection of Personal Information by Public Institutions'" and "have designated a personal information protection officer to ensure thorough protection of personal information."

However, the Human Rights Commission's judgment differed. First, it was confirmed through the commission's investigation that for over five years, the center required counseling team employees to use their 'staff name' as the ID and '1234' as the password when accessing the Saebit Call system. It was found that IDs and passwords were left recorded on individual counseling staff PCs, and notably, consultation-related log records containing personal information such as users' phone numbers, addresses, and travel routes were stored on employees' personal PCs.

In light of these facts, the Human Rights Commission judged that the center failed to properly implement safety measures according to the 'Standards for Securing the Stability of Personal Information.' It also added that even the personal information protection officer did not receive proper personal information protection training, confirming violations of the 'Personal Information Protection Act.'

Accordingly, the Human Rights Commission viewed that the Gwangju City Hall, the supervisory agency of the center, neglected the infringement of users' personal information self-determination rights by failing to properly verify or take action despite receiving complaints. The commission also confirmed that the Saebit Call system operator manages transportation vulnerable vehicle control systems in other cities and provinces, and judged that it is necessary for the Personal Information Protection Commission to inspect the personal information protection status of the Mobility Support Center.

This content was produced with the assistance of AI translation services.