GDPR 视角下个人信息保护的应用问题

• 영문명: Application Issues of Personal Information Protection from the Perspective of General Data Protection Regulation
• 발행기관: YIXIN 출판사
• 저자명: 邵子杰(Shao Zijie)
• 간행물 정보: 『Journal of east Asian law studies』제1권 제2호, 85~95쪽, 전체 11쪽
• 주제분류: 사회과학 > 교육학
• 파일형태: PDF
• 발행일자: 2024.09.30

국문 초록

The identification of personal information adopts the method of association definition, and the Personal Information Protection Law has both public and private legal norms, among which private law norms are specific provisions of the Civil Code. The General Data Protection Regulation (GDPR) of the European Union, which serves as a legislative model for China, emerged in the context of the lawsuit between the US Department of Justice and Microsoft. The internal logic of China ’ s personal information protection law is similar to this, both of which aim to balance the protection and use of personal information and block the long arm jurisdiction of the United States, in order to safeguard national data sovereignty. In the rules of informed consent, there are still many pain points regarding the obligation to inform. Consent should be considered a civil legal act, and the authenticity of consent should be explored in labor relations. Withdrawal of consent should be restricted in the context of contract law; The portability right is prone to encounter application difficulties in affiliated enterprises, and the legal provisions should be interpreted based on the system and understood in conjunction with specific application scenarios; The protection of personal information of the deceased needs to be improved in terms of practical institutional design in the field of personal information protection law, and the scope of close relatives should be appropriately limited and the order of branch rights should not be distinguished; Cross border provision of personal information is not feasible in the context of big data and online shopping. Therefore, the convenience of transactions should be taken into account, and personal information should be regulated according to sensitivity levels to achieve a balance between protection and utilization.

영문 초록

个人信息的识别采取关联界定的方式，《个人信息保护法》公私法规范兼具，其中私法规范属《民法典》的具体规定。作为我国立法模本的欧盟《通用数据保护条例》（GDPR）产生于美国司法部与微软公司诉讼的背景中，我国个人信息保护法的内在逻辑与其类似，均在于平衡个人信息保护与利用和阻断美国长臂管辖，维护国家数据主权。知情同意规则中，告知义务仍存在许多痛点，同意应属于民事法律行为，在劳资关系中应探索同意的真实性，撤回同意在合同法场合下应予以限制；可携带权在关联企业中容易出现适用困境，应依体系解释及结合具体应用场景实际理解法条内涵；死者个人信息保护在个人信息保护法领域存在实操上制度设计待完善，应适当限缩近亲属范围及不区分行权顺序；跨境提供个人信息在大数据海淘场景下欠缺可行性，应兼顾交易的便捷性，对个人信息按照敏感度分级监管，实现保护与利用的平衡。

목차

Ⅰ. 个人信息保护基本理论之争议

Ⅱ.《个人信息保护法》的立法原意

Ⅲ. 个人信息保护基本制度之争

Ⅳ. 结语

키워드

GDPR Personal information protection Basic theory Basic system Protection and utilization GDPR 个人信息保护 基本理论 基本制度 保护与利用