智慧图书馆个人信息保护政策合规性评价指标体系构建与对策研究

The Construction and Countermeasures of the Evaluation Index System for the Compliance of Personal Information Protection Policies of Smart Library

【目的/意义】探究智慧图书馆个人信息保护政策合规性评价指标体系构建,以期为图书馆个人信息保护政策的制定和完善提供参考,更好地促进个人信息保护落地。【方法/过程】在厘清图书馆用户个人信息范畴的基础上,选取16部个人信息保护相关法律法规作为依据并对其进行基于扎根理论的个人信息保护政策合规性评价指标体系构建,进而通过实证检验评价指标体系并提出相应解决对策。【结果/结论】构建了由8个一级指标和47个二级指标组成的个人信息保护政策合规性评价指标体系,同时利用实证分析得出目前图书馆个人信息保护政策的合规性一般。【创新/局限】运用扎根理论质性研究方法自下而上建立评价指标体系,并对指标体系进行了实证分析。智慧图书馆应处于智慧服务的层面,尚未形成与之对应的个人信息保护的法律法规,因此需要参考个人信息保护相关法律法规。

【Purpose/significance】To explore the construction of an evaluation index system for the compliance of personal information protection policies in the context of smart libraries,in order to provide reference for the formulation and improvement of personal information protection policy of library,and better promote the implementation of personal information protection.【Method/process】On the basis of clarifying the categories of library users'personal information,Sixteen laws and regulations related to personal information protection were selected as the basis and the evaluation index system of personal information protection policy compliance based on grounded theory was constructed,then the evaluation index system is empirically tested and corresponding solutions are put forward.【Result/conclusion】A personal information protection policy compliance evaluation index system is constructed,which consists of 8 first-level indicators and 47 second-level indicators,at the same time,it is concluded that the compliance of the personal information protection policy of the library is general by empirical evidence.【Innovation/limitation】The qualitative research method of grounded theory is used to establish the evaluation index system from bottom to top,and the index system is empirically analyzed.Smart library should be in the level of smart service,and the corresponding laws and regulations of personal information protection have not been formed,so it is necessary to refer to the relevant laws and regulations of personal information protection.