个人敏感数据的法律保护:欧盟立法及借鉴

Personal Sensitive Data Protection: EU Legislation and Reference

互联网时代,个人敏感数据的泄露将导致个人权利和利益受到重大威胁,亟需保护。欧盟通过隐私权和数据保护权双管齐下的方式对其予以保护,但囿于隐私权保护的范围、消极性和救济不足,数据保护权的一般保护规则、救济规则和保障义务不足,无法提供充分有效保护。欧盟针对个人敏感数据创设了差异化禁止处理规则、例外规则、个人特别救济规则,并课以数据服务方严格保障义务,以期实现保护适当、利用合理、救济及时、权责对等,值得借鉴。我国应根据数据敏感程度设置差别保护,创设例外规则,禁止格式条款,严格保障机制。

In the internet age,the revealing of personal sensitive data would lead to significant threat to personal right and benefits. In European Union,member states try to prevent it through the right of privacy and data protection. However,the effect is not satisfactory because of the narrow scope,negativity and lack of relief of privacy protection or the insufficient general protection rules,relief rules and guarantee obligations for data protection. We are required to learn the legislative consideration and rule design of EU related to the individual private and sensitive data protection,through which European Union made differential prohibition of processing rule,exception rule,specially individual remedy rule,and exerted the strict safeguard obligations to data service providers,expecting to realize proper protection,reasonable utilization,timely remedy and,equal rights and liabilities,While in our country,legislative body should implement differential protection of data based on sensitivity,add exception clauses,prohibited form clause and create a more stringent guarantee mechanism.