数字经济视野中的欧盟《一般数据保护条例》
|
摘要
数据是数字经济的关键生产要素,数据保护和利用规则构成了数字经济的底层架构。欧盟《一般数据保护条例》的出台与其重振数字经济、推动欧盟数字一体化市场的雄心密不可分。但在数据权利作为基本权利和欧盟各国作为数据经济消费国的背景下,《一般数据保护条例》对数字经济造成了不利影响,可能戕害创新、伤及互联网成熟业态、阻碍新兴产业的发展。我国应洞见其经济实质,作出有效的回应,并在《个人信息保护法》的制定中审慎借鉴相关规则。
Data is critical means of production in the digital economy,so the rules regarding the protection and use of data consist the underlying architecture of the digital economy.The EU General Data Protection Regulation is derived by the ambition of boosting the digital economy and urging the digital single market.However,due to the data right as the foundational right and the EU members as the countries of consumption in digital economy,the General Data Protection Regulation will cause the possible negative effect on the digital economy,for instance,it probably hinders the progress of innovation,damages mature business format of Internet,and impedes the development of emerging industries.We should look through the economic essence of the General Data Protection Regulation,response effectively to this regulation,and prudently transplant its rules in the process of legislation of Chinese Personal Information Protection Act.
Data is critical means of production in the digital economy,so the rules regarding the protection and use of data consist the underlying architecture of the digital economy.The EU General Data Protection Regulation is derived by the ambition of boosting the digital economy and urging the digital single market.However,due to the data right as the foundational right and the EU members as the countries of consumption in digital economy,the General Data Protection Regulation will cause the possible negative effect on the digital economy,for instance,it probably hinders the progress of innovation,damages mature business format of Internet,and impedes the development of emerging industries.We should look through the economic essence of the General Data Protection Regulation,response effectively to this regulation,and prudently transplant its rules in the process of legislation of Chinese Personal Information Protection Act.
引文
[1]王融.大数据时代数据保护与流动规则[M].北京:人民邮电出版社,2017.
[2]吴沈括.欧盟《一般数据保护条例》(GDPR)与中国应对[J].信息安全与通信秘密,2018(2).
[1]See Summary report of the public consultation on the evaluation of Directive 96/9/EC on the legal protection of databases,at https://ec.europa.eu/digital-single-market/en/news/summary-report-publicconsultation-legal-protection-databases,last visited on Sep.30,2018.
[2]See DG Internal Market and Services published the first evaluation of Directive 96/6/EC on the Legal Protection of Databases,at http://ec.europa.eu/internal_market/copyright/prot-databases/index_en.htm#maincontentSec2,last visited on Sep.30,2018.
[3]参见王融:《大数据时代数据保护与流动规则》,人民邮电出版社2017年版,第158页。
[4]参见吴沈括:“欧盟《一般数据保护条例》(GDPR)与中国应对”,《信息安全与通信秘密》2018年第2期,第13页。
[5]See Shaping the Digital Single Market,at https://ec.europa.eu/digital-single-market/en/policies/shaping-digital-single-market,last visited on Sep.30,2018.
[6]See Digital globalization:The new era of global flows,at https://www.mckinsey.com/business-functions/digital-mckinsey/our-insights/digital-globalization-the-new-era-of-global-flows,last visited on Sep.30,2018.
[7]See Ernst-Oliver Wilhelm,The GDPR:Fostering Trust in the Digital Single Market,at https://blog.gft.com/blog/2016/04/05/the-gdpr-fostering-trust-in-the-digital-single-market/,last visited on Sep.30,2018.
[8]一份调查显示:三分之二的欧洲人表示他们担心无法控制他们在网上提供的信息,而另一半则担心成为欺诈的受害者。See Special Eurobarometer 431,Data Protection Report,June 2015.
[9]See Graham Greenleaf,International data privacy agreements after the GDPR and Schrems,139Privacy Laws&Business International Report,2016.
[10]See Graham Greenleaf,Global Convergence of Data Privacy Standards and Laws,at http://www.ssrn.com/link/UNSW-LEG.html,last visited on Sep.30,2018.
[11]参见彭继增:“新贸易壁垒的内容、特点及其对策”,《价格月刊》2005年第9期,第18页。
[12]类似地,欧盟同样将中国《网络安全法》视为贸易和投资壁垒,参见“欧委会发布2017年度贸易和投资壁垒报告”,载http://www.mofcom.gov.cn/article/i/jyjl/m/201807/20180702762125.shtml,最后访问时间:2018年9月30日。
[13]参见罗斯:“欧盟数据隐私新规或制造贸易壁垒”,载http://www.ftchinese.com/story/001077857?full=y&archive,最后访问时间:2019年9月30日。
[14]See Fortune and FTSE Firms to Spend Millions Gearing up for GDPR Compliance,New Survey Shows,at https://www.paulhastings.com/news/details/?id=1c74ed69-2334-6428-811c-ff00004cb ded,last visited on Sep.30,2018.
[15]See Adam B.Jaffe&Karen Palmer,Environmental Regulation and Innovation:A Panel Data Study,The Review of Economics and Statistics,MIT Press,Vol.79(4),1997,pp.610~619.
[16]参见龙小宁、万威:“环境规制、企业利润率与合规成本规模异质性”,《中国工业经济》2017年第6期,第171页。
[17]See C.Markides,Disruptive Innovation:In Need of Better Theory,The Journal of Product Innovation Management,23,No.1,2006,pp.19~25.
[18]See Deloitte,Economic impact Assessment of the Proposed European General Data Protection Regulation.
[19]See N.Jentzsch,The Regulation of Financial Privacy:The United States vs Europe,ECRIResearch Report No.5,European Credit Research Institute(Brussels,2003).
[20]See Jin-Hyuk Kim and Liad Wagman,Screening Incentives and Privacy Protection in Financial Markets:A Theoretical and Empirical Analysis,The RAND Journal of Economics 46(1),2015,pp.2~22.
[21]See Nick Wallace and Daniel Castro,The Impact of the EU’s New Data Protection Regulation on AI,at http://www2.datainnovation.org/2018-impact-gdpr-ai.pdf,last visited on Sep.30,2018.
[22]See Michèle Finck,Blockchains and Data Protection in the European Union,Max Planck Institute for Innovation and Competition Research Paper No.18-01.
[23]参见王融:“《欧盟数据保护通用条例》:十个误解与争议”,载http://www.sohu.com/a/229319518_455313,最后访问时间:2018年9月30日。
[24]See Sohail Razi Khan,Luis Borges Gouvia,The implication and challenges of GDPR’s on Cloud Computing Industry,International Journal of Computer Science,Volume 5,Issue 7,2017,pp.106~110.
[25]参见方禹:“GDPR前言强调个人信息保护与自由流动的平衡”,载https://new.qq.com/omn/20180620/20180620A146VO.html,最后访问时间:2018年9月30日。
[26]例如,GDPR第6条规定了六种数据处理合法性基础,但除了“数据主体同意”外,其他如“公共利益”“数据控制者正当利益”等尚不存在明确的指引。
[27]See Office of the Press Secretary,We Can’t Wait:Obama Administration Unveils Blueprint for a“Privacy Bill of Rights”to Protect Consumers Online,at https://obamawhitehouse.archives.gov/thepress-office/2012/02/23/we-can-t-wait-obama-administration-unveils-blueprint-privacy-bill-rights,last visited on Sep.30,2018.
[28]See LIBE Committee,A Comparison between US and EU Data Protection Legislation for Law Enforcement,at http://www.europarl.europa.eu/RegData/etudes/STUD/2015/536459/IPOL_STU(2015)536459_EN.pdf,last visited on Sep.30,2018.
[29]2018年9月,发改委出台《关于发展数字经济稳定并扩大就业的指导意见》,要求以大力发展数字经济促进就业为主线,不断拓展就业创业新空间,着力实现更高质量和更充分就业。
[2]吴沈括.欧盟《一般数据保护条例》(GDPR)与中国应对[J].信息安全与通信秘密,2018(2).
[1]See Summary report of the public consultation on the evaluation of Directive 96/9/EC on the legal protection of databases,at https://ec.europa.eu/digital-single-market/en/news/summary-report-publicconsultation-legal-protection-databases,last visited on Sep.30,2018.
[2]See DG Internal Market and Services published the first evaluation of Directive 96/6/EC on the Legal Protection of Databases,at http://ec.europa.eu/internal_market/copyright/prot-databases/index_en.htm#maincontentSec2,last visited on Sep.30,2018.
[3]参见王融:《大数据时代数据保护与流动规则》,人民邮电出版社2017年版,第158页。
[4]参见吴沈括:“欧盟《一般数据保护条例》(GDPR)与中国应对”,《信息安全与通信秘密》2018年第2期,第13页。
[5]See Shaping the Digital Single Market,at https://ec.europa.eu/digital-single-market/en/policies/shaping-digital-single-market,last visited on Sep.30,2018.
[6]See Digital globalization:The new era of global flows,at https://www.mckinsey.com/business-functions/digital-mckinsey/our-insights/digital-globalization-the-new-era-of-global-flows,last visited on Sep.30,2018.
[7]See Ernst-Oliver Wilhelm,The GDPR:Fostering Trust in the Digital Single Market,at https://blog.gft.com/blog/2016/04/05/the-gdpr-fostering-trust-in-the-digital-single-market/,last visited on Sep.30,2018.
[8]一份调查显示:三分之二的欧洲人表示他们担心无法控制他们在网上提供的信息,而另一半则担心成为欺诈的受害者。See Special Eurobarometer 431,Data Protection Report,June 2015.
[9]See Graham Greenleaf,International data privacy agreements after the GDPR and Schrems,139Privacy Laws&Business International Report,2016.
[10]See Graham Greenleaf,Global Convergence of Data Privacy Standards and Laws,at http://www.ssrn.com/link/UNSW-LEG.html,last visited on Sep.30,2018.
[11]参见彭继增:“新贸易壁垒的内容、特点及其对策”,《价格月刊》2005年第9期,第18页。
[12]类似地,欧盟同样将中国《网络安全法》视为贸易和投资壁垒,参见“欧委会发布2017年度贸易和投资壁垒报告”,载http://www.mofcom.gov.cn/article/i/jyjl/m/201807/20180702762125.shtml,最后访问时间:2018年9月30日。
[13]参见罗斯:“欧盟数据隐私新规或制造贸易壁垒”,载http://www.ftchinese.com/story/001077857?full=y&archive,最后访问时间:2019年9月30日。
[14]See Fortune and FTSE Firms to Spend Millions Gearing up for GDPR Compliance,New Survey Shows,at https://www.paulhastings.com/news/details/?id=1c74ed69-2334-6428-811c-ff00004cb ded,last visited on Sep.30,2018.
[15]See Adam B.Jaffe&Karen Palmer,Environmental Regulation and Innovation:A Panel Data Study,The Review of Economics and Statistics,MIT Press,Vol.79(4),1997,pp.610~619.
[16]参见龙小宁、万威:“环境规制、企业利润率与合规成本规模异质性”,《中国工业经济》2017年第6期,第171页。
[17]See C.Markides,Disruptive Innovation:In Need of Better Theory,The Journal of Product Innovation Management,23,No.1,2006,pp.19~25.
[18]See Deloitte,Economic impact Assessment of the Proposed European General Data Protection Regulation.
[19]See N.Jentzsch,The Regulation of Financial Privacy:The United States vs Europe,ECRIResearch Report No.5,European Credit Research Institute(Brussels,2003).
[20]See Jin-Hyuk Kim and Liad Wagman,Screening Incentives and Privacy Protection in Financial Markets:A Theoretical and Empirical Analysis,The RAND Journal of Economics 46(1),2015,pp.2~22.
[21]See Nick Wallace and Daniel Castro,The Impact of the EU’s New Data Protection Regulation on AI,at http://www2.datainnovation.org/2018-impact-gdpr-ai.pdf,last visited on Sep.30,2018.
[22]See Michèle Finck,Blockchains and Data Protection in the European Union,Max Planck Institute for Innovation and Competition Research Paper No.18-01.
[23]参见王融:“《欧盟数据保护通用条例》:十个误解与争议”,载http://www.sohu.com/a/229319518_455313,最后访问时间:2018年9月30日。
[24]See Sohail Razi Khan,Luis Borges Gouvia,The implication and challenges of GDPR’s on Cloud Computing Industry,International Journal of Computer Science,Volume 5,Issue 7,2017,pp.106~110.
[25]参见方禹:“GDPR前言强调个人信息保护与自由流动的平衡”,载https://new.qq.com/omn/20180620/20180620A146VO.html,最后访问时间:2018年9月30日。
[26]例如,GDPR第6条规定了六种数据处理合法性基础,但除了“数据主体同意”外,其他如“公共利益”“数据控制者正当利益”等尚不存在明确的指引。
[27]See Office of the Press Secretary,We Can’t Wait:Obama Administration Unveils Blueprint for a“Privacy Bill of Rights”to Protect Consumers Online,at https://obamawhitehouse.archives.gov/thepress-office/2012/02/23/we-can-t-wait-obama-administration-unveils-blueprint-privacy-bill-rights,last visited on Sep.30,2018.
[28]See LIBE Committee,A Comparison between US and EU Data Protection Legislation for Law Enforcement,at http://www.europarl.europa.eu/RegData/etudes/STUD/2015/536459/IPOL_STU(2015)536459_EN.pdf,last visited on Sep.30,2018.
[29]2018年9月,发改委出台《关于发展数字经济稳定并扩大就业的指导意见》,要求以大力发展数字经济促进就业为主线,不断拓展就业创业新空间,着力实现更高质量和更充分就业。