从认证全过程视角理解与完善个人信息保护认证制度被引量：1

Understand and improve the personal information protection certification system from the perspective of the whole certification process

在线阅读下载PDF

导出

摘要个人信息保护认证与个人信息跨境提供中其他出境制度相比,可以实现个人信息安全与自由流动之间的平衡,比安全评估制度具有更自由的流动性,比标准合同具有更稳定的安全性。在全球数据经济逐渐占据主导地位的今天,个人信息保护认证制度有其巨大的实施价值。同时,认证机构作为个人信息保护认证中关键的一环,要求认证机构具有公平性和专业性的资质,在认证中保持客观中立并发挥应有的专业水平。然而,个人信息保护认证制度在我国刚刚起步不久,相关法律规定还不完善,具体落实的几个方面都存在不足,主要包括认证前启动、认证中审查和认证后担责。因此,在认证前启动要秉持自愿认证与强制认证相结合;在认证中扩大可申请认证的主体范围,并建立分级分类认证标准制度;在认证后完善私法和公法双重救济途径。 Compared with other export systems in the cross-border provision of personal information,personal information protection certification can achieve a balance between personal information security and free flow,and has freer mobility than the security assessment system,and has more stable security than standard contracts.Today,when the global data economy is gradually dominant,the personal information protection certification system has great implementation value.At the same time,as a key part of personal information protection certification,certification bodies are required to have fair and professional qualifications,maintain objectivity and neutrality in certification and give full play to their due professional level.However,the personal information protection certification system has just started in China,and the relevant laws and regulations are not perfect,and there are deficiencies in several aspects of specific implementation,mainly including pre-certification start,certification review and post-certification responsibility.Therefore,the combination of voluntary certification and compulsory certification should be adhered to before certification;Expand the scope of subjects that can apply for certification in certification,and establish a hierarchical and classified certification standard system;Improve the dual remedies of private law and public law after certification.

作者聂磊磊 Nie Leilei(School of Law,People′s Public Security University of China,Beijing 100038,China)

机构地区中国人民公安大学法学院

出处《网络安全与数据治理》 2023年第11期39-45,共7页 CYBER SECURITY AND DATA GOVERNANCE

关键词个人信息出境个人信息保护认证认证机构认证全过程利益衡平 personal information export personal information protection certification certification bodies the whole process of certification equity of interests

分类号 TP315 [自动化与计算机技术—计算机软件与理论]

作者简介聂磊磊(2000-),男,硕士研究生,主要研究方向:国际法学、计算法学。