欧盟《一般数据保护条例》指导下的数据保护官制度解析与启示
|
摘要
欧盟发布的《一般数据保护条例》对数据保护官的组织定位、设置条件、功能特征、资质要求等做出了明确的规定。《一般数据保护条例》指导下的数据保护官制度,启示着我国企业的组织机构需要对接国际标准、立足本土,从数据保护岗位设置来促进数据保护的合规实践;我国的数据管理人才培养,需要健全培养目标、丰富培养方式、创新培养内容、对接职业场景;有关学科专业需要积极参与到数据保护官的职业标准化和认知体系建设之中。
The EU General Data Protection Regulation presents a new trend of data protection and a new order. In this background, domestic institutions need to improve the mechanism of data protection and to establish data protection personnel. Data Protection Officer(DPO) is a basic setting to promote data protection compliance practice. This paper analyzes the ability and positioning of data protection officers under the guidance of GDPR, as well as ability requirements and qualifications, and provides reference for the setting and training of professional talents.
The EU General Data Protection Regulation presents a new trend of data protection and a new order. In this background, domestic institutions need to improve the mechanism of data protection and to establish data protection personnel. Data Protection Officer(DPO) is a basic setting to promote data protection compliance practice. This paper analyzes the ability and positioning of data protection officers under the guidance of GDPR, as well as ability requirements and qualifications, and provides reference for the setting and training of professional talents.
引文
[1]胡文华.冲击与应对:GDPR与《网络安全法》比较视野下的企业合规[J].中国信息安全,2018(7):77-81.
[2]任哲.建立欧盟统一的数据保护框架[J].中国金融, 2018(12):57-58.
[3]扎克伯格称Facebook是科技公司,否认垄断市场[EB/OL].[2018-07-01].http://tech.163.com/18/0412/07/DF668IA300097U7R.html.
[4]何治乐,黄道丽.欧盟《一般数据保护条例》的出台背景及影响[J].信息安全与通信保密,2014(10):72-75.
[5]田新月.欧盟《一般数据保护条例》新规则评析[J].武大国际法评论,2016(2):466-479.
[6] Voss W.Preparing for the Proposed EU General Data Protection Regulation:With or without Amendments[EB/OL].[2018-07-01].http://works.bepress.com/gregory_voss/6/.
[7]彭星.欧盟《一般数据保护条例》浅析及对大数据时代下对大数据时代下大数据时代下我国征信监管的启示[J].武汉金融,2016(9):42-45.
[8]王达,伍旭川.欧盟《一般数据保护条例》的主要内容及对我国的启示[J].金融与经济,2018(4):78-81.
[9] Professional Standards for Data Protection Officers[EB/OL].[2018-07-01].https://edps.europa.eu/sites/edp/files/publication/10-10-14_dpo_standards_en.pdf.
[10] Does the GDPR apply to me?[EB/OL].[2018-07-01].https://www.itgovernance.eu/blog/en/does-the-gdpr-apply-to-me.
[11] Focus on Five High-Priority Changes to Tackle the EU GDPR[R].Garter Inc,Stamford:2016.
[12] Esther van Duin.GDPR in the public sector[EB/OL].[2018-09-01].https://www2.deloitte.com/nl/nl/pages/risk/articles/gdprin-the-public-sector.html.
[13] Position paper on the role of Data Protection Officers in ensuring effective compliance with Regulation(EC)45/2001[EB/OL].[2018-07-01].https://edps.europa.eu/sites/edp/files/publication/05-11-28_dpo_paper_en.pdf.
[14] Why you need a data protection officer[EB/OL].[2018-07-01].https://www.cio.com/article/3160855/it-industry/why-youneed-a-data-protection-officer.htm.
[15] Review the implementing rules[EB/OL].[2018-07-01].https://edps.europa.eu/node/3886.
[16] The DPO at work[EB/OL].[2018-07-01].https://edps.europa.eu/data-protection/our-work/publications/other-documents/dpo-work_en.
[17] Issues for public sector bodies appointing a Data Protection Officer under the GDPR[EB/OL].[2018-07-01].https://www.lexology.com/library/detail.aspx?g=651dd131-f155-4525-9fc5-f2135e4439b0.
[18]冯迪凡,钱童心,张剑.GDPR正式生效数据隐私规则影响深重[N].第一财经日报,2018-05-28(A1).
[19]王春晖.GDPR个人数据权与《网络安全法》个人信息权之比较[J].中国信息安全,2018(7):41-44.
[20]钱擘.东航设立“数据保护官”[N].中国民航报,2018-05-28(1).
[21]华为公司.隐私保护和一般数据保护条例(GDPR)[EB/OL].[2018-07-01].https://www.huawei.com/cn/privacy-and-gdpr.
[22] Network of DPOs[EB/OL].[2018-07-01].https://edps.europa.eu/data-protection/eu-institutions-dpo/network-dpos_en.
[23]王铮,张鹏.海外新型图书馆员岗位研究[J].情报资料工作,2015(2):106-111.
[24] GDPR:who needs to hire a data protection officer?[EB/OL].[2018-07-01].https://nakedsecurity.sophos.com/2017/07/04/gdpr-who-needs-to-hire-a-data-protection-officer/.
[25]孟祥保,钱鹏.国外数据管理专业教育实践与研究现状[J].中国图书馆学报,2013,39(6):63-74.
[26]沈婷婷.数据素养及其对科学数据管理的影响[J].图书馆论坛,2015,35(1):68-73.
[27]司莉,邢之明,庄晓喆,等.Science Data Specialist培育:LIS面向e-Sicence服务的需求与变革[J].情报科学,2015(2):9-16.
[28]完颜邓邓,高峰.国外数据管理专业人才培养调查及启示[J].图书馆理论与实践,2016(6):21-26.
[2]任哲.建立欧盟统一的数据保护框架[J].中国金融, 2018(12):57-58.
[3]扎克伯格称Facebook是科技公司,否认垄断市场[EB/OL].[2018-07-01].http://tech.163.com/18/0412/07/DF668IA300097U7R.html.
[4]何治乐,黄道丽.欧盟《一般数据保护条例》的出台背景及影响[J].信息安全与通信保密,2014(10):72-75.
[5]田新月.欧盟《一般数据保护条例》新规则评析[J].武大国际法评论,2016(2):466-479.
[6] Voss W.Preparing for the Proposed EU General Data Protection Regulation:With or without Amendments[EB/OL].[2018-07-01].http://works.bepress.com/gregory_voss/6/.
[7]彭星.欧盟《一般数据保护条例》浅析及对大数据时代下对大数据时代下大数据时代下我国征信监管的启示[J].武汉金融,2016(9):42-45.
[8]王达,伍旭川.欧盟《一般数据保护条例》的主要内容及对我国的启示[J].金融与经济,2018(4):78-81.
[9] Professional Standards for Data Protection Officers[EB/OL].[2018-07-01].https://edps.europa.eu/sites/edp/files/publication/10-10-14_dpo_standards_en.pdf.
[10] Does the GDPR apply to me?[EB/OL].[2018-07-01].https://www.itgovernance.eu/blog/en/does-the-gdpr-apply-to-me.
[11] Focus on Five High-Priority Changes to Tackle the EU GDPR[R].Garter Inc,Stamford:2016.
[12] Esther van Duin.GDPR in the public sector[EB/OL].[2018-09-01].https://www2.deloitte.com/nl/nl/pages/risk/articles/gdprin-the-public-sector.html.
[13] Position paper on the role of Data Protection Officers in ensuring effective compliance with Regulation(EC)45/2001[EB/OL].[2018-07-01].https://edps.europa.eu/sites/edp/files/publication/05-11-28_dpo_paper_en.pdf.
[14] Why you need a data protection officer[EB/OL].[2018-07-01].https://www.cio.com/article/3160855/it-industry/why-youneed-a-data-protection-officer.htm.
[15] Review the implementing rules[EB/OL].[2018-07-01].https://edps.europa.eu/node/3886.
[16] The DPO at work[EB/OL].[2018-07-01].https://edps.europa.eu/data-protection/our-work/publications/other-documents/dpo-work_en.
[17] Issues for public sector bodies appointing a Data Protection Officer under the GDPR[EB/OL].[2018-07-01].https://www.lexology.com/library/detail.aspx?g=651dd131-f155-4525-9fc5-f2135e4439b0.
[18]冯迪凡,钱童心,张剑.GDPR正式生效数据隐私规则影响深重[N].第一财经日报,2018-05-28(A1).
[19]王春晖.GDPR个人数据权与《网络安全法》个人信息权之比较[J].中国信息安全,2018(7):41-44.
[20]钱擘.东航设立“数据保护官”[N].中国民航报,2018-05-28(1).
[21]华为公司.隐私保护和一般数据保护条例(GDPR)[EB/OL].[2018-07-01].https://www.huawei.com/cn/privacy-and-gdpr.
[22] Network of DPOs[EB/OL].[2018-07-01].https://edps.europa.eu/data-protection/eu-institutions-dpo/network-dpos_en.
[23]王铮,张鹏.海外新型图书馆员岗位研究[J].情报资料工作,2015(2):106-111.
[24] GDPR:who needs to hire a data protection officer?[EB/OL].[2018-07-01].https://nakedsecurity.sophos.com/2017/07/04/gdpr-who-needs-to-hire-a-data-protection-officer/.
[25]孟祥保,钱鹏.国外数据管理专业教育实践与研究现状[J].中国图书馆学报,2013,39(6):63-74.
[26]沈婷婷.数据素养及其对科学数据管理的影响[J].图书馆论坛,2015,35(1):68-73.
[27]司莉,邢之明,庄晓喆,等.Science Data Specialist培育:LIS面向e-Sicence服务的需求与变革[J].情报科学,2015(2):9-16.
[28]完颜邓邓,高峰.国外数据管理专业人才培养调查及启示[J].图书馆理论与实践,2016(6):21-26.