大数据时代儿童数据法律保护的困境及其应对——兼评欧盟《一般数据保护条例》的相关规定

The Dilemma and Outlet of the Legal Protection of Children's Data in the Era of Big Data——An Additional Comment on the Relevant Regulations of EU GDPR

大数据时代儿童数据的法律保护面临着"赋权与保护"和"个性化与平均年龄"两大困境。欧盟《一般数据保护条例》为解决以上困境做出了努力,但仍存在一定问题:严格的父母同意可能导致对儿童的过度保护,平均年龄的简单二分法可能限制有能力儿童的网络活动。应以差异化的父母同意方式取代严格的父母同意,以一定年龄界限基础上的个性化评估取代平均年龄的单一规定。网络治理机构应加强数据周期内利益相关者的共同协作与对话,不断寻求更好的儿童数据保护方案。我国《未成年人网络保护条例》的制定应合理借鉴欧盟《一般数据保护条例》和美国的相关立法经验。

The legal protection of children s data in the era of big data faces two major dilemmas:“the empowerment and protection”and“the individualization and average age”.The EU GDPR has made efforts to cope with the above difficulties,but there are still some problems.The strict parental consent principle of GDPR may result in an excessive protection for children; the simple dichotomy of average age may limit the network activities of talented children.The substitution of the differentiated parental consent approach to strict parental consent principle helps balance the conflict between“empowerment”and“protection”; the substitution of an individual assessment based on certain age limit to the cooperation and dialogue of stakeholders in the data chain will constantly seek better data protection programs of children.The formulation of the“Network Protection Regulation of Minors”should draw reasonable references to the legislative experience of EU GDPR and Children's Online Privacy Protection Act(COPPA)in America.