数字平台个人信息保护政策第三方评估的规范路径

Digital Platform Personal Information Protection Policy Normative Path for Third-Party Evaluation

第三方评估是数字平台个人信息保护政策法律规制体系中的重要一环。首先,需要讨论个人信息保护政策第三方评估的法理基础。在个人信息保护政策规制中引入第三方评估旨在贯彻合作规制理念、弥补行政规制不足与提升规制的遵从率。其次,从多个角度认识政策第三方评估的法律性质。第三方机构应在国家网信部门认可之后开展评估工作,评估的性质是具有法律效力的规制性评估,在此基础上厘清第三方评估与其他规制主体之间的关系对认识第三方评估具有重要意义。最后,在政策第三方评估具体运作中,可以从保障第三方评估公正独立性、完善第三方评估运行程序与合理分配评估机构法律责任依次展开。通过建构数字平台个人信息保护政策第三方评估,形成多主体、多层次和全方位的个人信息保护政策法律规制体系,为规范平台企业实施的个人信息处理活动提供有益智识。

Third-party evaluation is an important part of the legal regulation system of personal information protection policy of digital platform.First,we need to discuss the legal basis for third-party evaluation of personal information protection policies.The purpose of introducing third-party evaluation into the regulation of personal information protection policy is to implement the concept of cooperative regulation,make up for the lack of administrative regulation and improve the compliance rate of regulation.Secondly,the legal nature of third-party policy evaluation is understood from multiple angles.The third-party organization should carry out the evaluation after the approval of the national network information department.The nature of the evaluation is a regulatory evaluation with legal effect.On this basis,it is important to clarify the relationship between the third-party evaluation and other regulatory subjects for understanding the third-party evaluation.Finally,in the concrete operation of the policy third-party evaluation,we can start from ensuring the impartiality and independence of the third-party evaluation,perfecting the operation procedure of the third-party evaluation and reasonably distributing the legal responsibility of the evaluation organization.By constructing the third-party evaluation of personal information protection policy of digital platform,a multi-subject,multi-level and all-round legal regulation system of personal information protection policy will be formed,which will provide useful knowledge for standardizing personal information processing activities implemented by platform enterprises.