云时代下图书馆数据保护合规体系的提倡与构建

Advocacy and Construction of Data Protection Compliance System of Libraries in the Cloud Era

文章对云时代下图书馆的数据类别与面临风险进行了研究,考察了域外以美国为代表的图书馆数据保护行业合规模式和以德国为代表的图书馆数据保护法律合规模式。立足于我国图书馆核心价值与信息组织变革原理的理论基础、数据立法及图书馆数据安保法定义务的规范基础、国内企业合规与数据合规浪潮勃兴的实践基础,提出我国应以数据保护合规治理理念为“一体”,以数据保护合规计划、数据保护合规岗位组织体系、图书馆全数据保护合规文化、图书馆全数据保护合规技术为“四翼”,形成图书馆全流程数据保护合规体系。

This paper studies the data categories and risks faced by libraries in the cloud era,examines the compliance model of library data protection industry represented by the United States and the legal compliance model of library data protection represented by Germany.Based on the theoretical basis of China′s library core values and information organization reform principles,the normative basis of data legislation and library data security legal obligations,and the practical basis of the booming tide of domestic enterprise compliance and data compliance,this paper proposes that China should take the concept of data protection compliance governance as"one body",and take the data protection compliance plan,the data protection compliance post organization system,the library full data protection compliance culture,and the library full data protection compliance technology as"four wings"to form a library full process data protection compliance system.