法人的数据保护:缘由、实践与建构

Data Protection of Legal Person: Basis,Practice and Construction

伴随着大数据的浪潮涌动,法人在数据经济运行中的核心地位日渐凸显。法人不仅是数据的搜集方,也可能成为数据的被搜集方。法人的数据能否以及如何获得保护,成为法律系统必须回应的技术问题。理论层面的探讨与实践层面的分析表明,法人的数据保护具有充分的正当性基础,而美国与欧盟的数据保护路径虽不尽相同,但均为法人的数据保护预设了制度空间。作为数据搜集方的法人,享有数据处理权;作为数据被搜集方的法人,享有数据知情、控制、更正、可携带等权利,但不享有被遗忘权。双重法律赋权不仅保护了法人的数据,同时矫正了数据市场中的保护失衡。

With the popularity of big data,the central role of legal person in the operation of the data economy is becoming prominent.Legal person is not only the data collector,but also the object of data collector.The legal system must respond to technical questions about whether and how legal person’s data can be protected.Through theoretical discussion and practical analysis,it can be found that the data protection of legal person has sufficient legitimacy basis.Although the data protection paths of the United States and the European Union are different,they all leave possible space for the data protection of legal person.The legal person,as the data collector,enjoys the right of data processing;as the object of data collector,enjoys the right to know,control,correct and carry the data,but does not have the right to be forgotten.Dual legal empowerment not only protects legal person’s data but also corrects the protection imbalance in the data market.