国外个人数据保护官的概念、职责与能力素质

The Concept,Responsibility and Ability of Personal Data Protection Officer Abroad

[目的／意义]从理论上总结分析国外个人数据保护官的含义、类型、职责与能力素质要求，为我国实践领域的应用提供学术上的分析和建议。[方法／过程】通过文献回溯检索考查个人数据保护官的起源和含义；参考领英平台个人数据保护官招聘公告以及美国O＊NET系统相关职业的规范模型，以KSAO模型以及杨和查普曼的能力模型为基础，从风险管理视角归纳总结国外个人数据保护官职责体系和能力素质要求。[结果／结论]目前国外个人数据保护官的类型多样，有业务类型也有顾问类型，有决策层的也有基层的。从风险管理视角来看，个人数据保护官承担隐私法律风险管控的重要职责，而胜任这些职责，则需要具有相应隐私法律知识、信息分析知识等，应具有问题敏感性、解决问题、善于沟通等能力，应具有注重细节、适应复杂和快捷工作环境等特质。

[ Purpose/significance] This paper summarizes and analyzes the meaning, type, responsibility and ability quality requirements of foreign personal data protection officers in theory, and provides academic analysis and suggestions for the application of China＇ s practical field. [ Method/process ] The origin and meaning of personal data protection officers are examined through literature backtracking. Based on the KSAO model and the ability model of Yang and Chapman, this paper sums up the responsibility system and ability quality requirements of foreign personal data protection of- ricers from the perspective of risk management, referring to the recruitment bulletins of the personal data protection officer in the Linkedin and the related professional specifications of US O ＊ NET system. [ Result/conclusion] At present, there are various types of personal data protection officers abroad, including business type and consultant type. From the perspective of risk management, the personal data protection officer takes on the important responsibilities of the privacy legal risk management and control. In order to complete these responsibilities, the personal data protection officer needs relevant privacy legal knowledge, information analysis knowledge and so on, needs the abilities of being sensitivity to problem, solving problem and good communication, and needs to be able to pay attention to details and adapt to the complex and rapid working