信息通信技术与政策

信息通信技术与政策

信息通信技术与政策 ›› 2019, Vol. 45 ›› Issue (4): 89-96.

上一篇    

云计算企业个人数据保护研究

Research on cloud computing enterprise personal data protection

  

  • 出版日期:2019-04-15 发布日期:2020-12-03
  • 作者简介:
    武倩聿:中国信息通信研究院云计算与大数据研究所工程师
    郭雪:中国信息通信研究院云计算与大数据研究所中级工程师
    郑立:中国信息通信研究院云计算与大数据研究所工程师
    张琳琳:中国信息通信研究院云计算与大数据研究所工程师

  • Online:2019-04-15 Published:2020-12-03

摘要: 云计算作为一项基础设施已经逐渐普及,云上数据的安全关系到国计民生的发展。在云计算产业蓬勃发展的背景下,国内头部厂商开始拓展海外市场,而欧盟、新加坡、日本等国纷纷出台相关法律法规对个人数据保护提出严格要求。由于云计算企业对外提供云服务,其云端存储的大量用户数据中很有可能涉及个人隐私数据,如何采取措施保护个人数据安全、应对各国法律法规的监管要求,对我国云计算企业的国际化发展十分重要。本文从云计算企业出海面临的实际安全问题出发,对各国个人数据保护相关法律法规进行了梳理和对比,提炼出了云服务企业的主要合规场景,最后为云服务企业如何更好地保护个人数据提出了措施建议。

关键词: 云计算, 个人数据保护, 云服务商, GDPR

Abstract: As an infrastructure, cloud computing has been gradually popularized. The security of cloud data is related to the development of national economy and people’s livelihood. In the context of the booming cloud computing industry, domestic leading manufacturers begin to expand overseas markets, while the European Union, Singapore, Japan and other countries have introduced relevant laws and regulations to put forward strict requirements on the protection of personal data. As cloud computing enterprises provide cloud services externally, a large amount of user data stored in the cloud is likely to involve personal privacy data. How to take measures to protect personal data security and respond to the regulatory requirements of laws and regulations of various countries is very important for the international development of cloud computing enterprises in China. This paper starts from the actual security problems faced by cloud computing enterprises at sea, sorts out and compares relevant laws and regulations on personal data protection in various countries, extracts the main compliance scenarios of cloud service enterprises, and finally proposes measures and suggestions for cloud service enterprises on how to better protect personal data.

Key words: cloud computing, personal data protection, cloud service provider, GDPR