Provided are an electronic device for protecting personal information and an operation method thereof. The electronic device for protecting a user’s personal information comprises: a communication unit; an output unit; a memory for storing one or more instructions; and a processor for executing the one or more instructions stored in the memory, wherein the processor: acquires policy data indicating a policy on processing of the user’s personal information related to a service provided by the electronic device; identifies, from the acquired policy data, first personal information to be used for provision of the service; identifies, from an execution file of an application which provides the service, second personal information configured to be used by the application; identifies third personal information used by the application while the application is executed; compares the first personal information identified from the policy data, the second person information identified from the execution file of the application, and the third personal information used by the application; and determines an operation of the electronic device for protecting the user’s personal information, on the basis of a result of the comparison.