俄罗斯个人资料法研究

Research on Russian Personal Data Act

俄罗斯个人资料法以在《自动化处理个人资料时保护自然人欧盟公约》为基础,以保护包括隐私权在内的处理个人资料时人和公民的权利与自由为宗旨,适用于包括非自动化个人资料处理在内的所有个人资料处理。其立法的最鲜明特色在于,以最大篇幅规定了个人资料处理人的义务,以此保障个人资料主体权利的实现,同时,明确规定了俄罗斯公民个人资料必须在俄罗斯境内保存的本地化保存要求,在作为法人的处理人内部设立个人资料专员制度。在国家监督与监察方面,创设了非独立的行政机关模式的个人资料主体权利保护主管机关,而非追随欧盟所倡导的独立的个人资料保护机关模式。

Russian Personal Data Act is based on European Convention on the Protection of Natural Persons in the Processing of Personal Data,for the purpose of protecting the rights and freedom including the right of privacy of persons and citizens in the processing of personal data,and is applicable to all personal data processing including non-automated personal data processing. The most distinctive feature of its legislation is that the maximum length of the provisions is about obligations of personal data processing person in order to protect the realization of the personal rights of the main body. At the same time,it clearly defined that Russian citizens personal information must be preserved in the Russian territory, and a system of personal data specialists should be established in the processing person as a legal person. In the area of national supervision,it established a non-independent administrative organ model of the main body for the protection of subjective rights of personal data,rather than following the European model of independent personal information protection agencies.