In some embodiments, a method for risk identification of personal information of a service/platform provider side is provided. A specification is received related to data usage for at least one among service and application of a third party side from a device of the third party side, and is stored in data storage of the service/platform provider side. User consent information is received from a user side using at least one among the service and application. The received information is stored in the data storage of the service/platform provider side. A process is inspected and monitored related to data storing and processing in user environment or platform environment of the user side using at least one among the service and application. A monitoring function is provided for data stored in the data storage of the service/platform provider side in connection with at least one among the service and application.