信息通信技术与政策

信息通信技术与政策

信息通信技术与政策 ›› 2021, Vol. 47 ›› Issue (9): 65-71.doi: 10.12267/j.issn.2096-5931.2021.09.011

上一篇    下一篇

解析我国规制个人信息泄露问题的法律路径

Analysis of the legal path to solve personal information breach problem in China

杨婕   

  1. 中国信息通信研究院政策与经济研究所,北京100191,
  • 出版日期:2021-09-15 发布日期:2021-09-07
  • 作者简介:
    杨婕:中国信息通信研究院政策与经济研究所研究员,个人信息保护立法研究团队负责人,主要从事个人信息保护、人工智能伦理法律以及数据治理等互联网领域立法研究

YANG Jie   

  1. Policy and Economics Research Institute, China Academy of Information and Communications Technology,Beijing 100191, China
  • Online:2021-09-15 Published:2021-09-07

摘要: 个人信息泄露不分国界,国外也高度关注个人信息泄露问题,采取多管齐下规定个人信息泄露通知、登记注册和个人信息安全保障制度,加大个人信息泄露处罚力度并启动集体诉讼赔偿受害者损失等应对措施。一直以来,我国高度关注个人信息泄露问题,不断完善规制个人信息泄露的制度规则,通过规定个人信息安全保障义务(防范源头)以及设立个人信息泄露通知制度( 控制末端),形成闭环管理机制。同时,个人信息保护相关执法工作也在逐步铺开,监管工作取得一定成效。但在治理个人信息泄露的过程中,存在监管抓手不足,个人维权困难等问题。建议我国在行业领域推进个人信息泄露安全管理工作以及落实公益诉讼机制,多措并举实现对于个人信息泄露问题的有效治理。

关键词: 个人信息泄露, 安全保障, 监管机制, 公益诉讼

Abstract: Personal information breach knows no borders, and foreign countries also pay great attention to the issue of personal information breach, adopting a multi-pronged approach to stipulate personal information breach notification,registration and personal information security protection systems, increasing the penalties, and launching class actions to compensate victims countermeasures such as losses. China has always paid great attention to the issue of personal information breach, and has continuously improved the rules and regulations governing personal information breach. It has formed a closed-loop management mechanism by stipulating personal information security obligations (preventing the source) and establishing a personal information breach notification system (end of control). At the same time, law enforcement work related to personal information protection is gradually being rolled out, and supervision work has achieved certain results. However, in the process of managing personal information breach, there are problems such as insufficient supervision and difficulty in personal rights protection. It is recommended that China promote the safety management of personal information breach in the industry and implement the public interest litigation mechanism, and take multiple measures to achieve effective management of personal information breach.

Key words: personal information breach, security, supervision mechanism, public interest litigation