“通过设计保护隐私”机制的法律实践、技术支撑与商业运用研究

Privacy by Design: From Legal Practice, Technical Support and Commercial Application

[目的/意义]个人隐私和数据保护一直是信息技术发展以来国际社会关注的焦点。"通过设计保护隐私"机制作为一种可行且有预防性的隐私保护手段逐渐在欧盟和美国数据保护法律实践中有所体现。我国尚未在隐私保护的法律法规及国家标准规范中提及该机制,不利于信息网络环境下个人数据和隐私的保护。[方法/过程]以"问题导向—比较研究—制度研究"为逻辑线索展开研究。问题导向和制度研究采用文献研究和案例研究,梳理和发现"通过设计保护隐私"机制的内涵以及从制度安排上需要解决的问题。比较研究采用文献研究分析方法,探讨美国和欧盟等国在法律实践、技术采用和商业运用方面设置"通过设计保护隐私"机制的措施和特点,以及对我国的启示。[结果/结论]通过分析,探索设置"通过设计保护隐私"机制应注意的法律、商业和技术设计层面的要求,为今后在我国法律中纳入"通过设计保护隐私"机制以及敦促我国企业采用该机制提供借鉴和参考。

[Purpose/Significance]Privacy and data protection have been the focus of attention of the international community since the development of information technology.As a feasible and preventive means of privacy protection,Privacy by Design(PbD)has gradually been embodied in the legal practice of data protection in the European Union and the United States.China has not yet mentioned PbD in the laws,regulations and national standards concerning privacy protection,which is not conducive to the protection of personal data and privacy under the information network environment.[Method/Process]This article uses"problem-oriented study;comparative study;institutional research"as the logical clue to start the research.Problem-oriented study and institutional research use literature and case studies to sort out and discover the connotation of PbD and the problems that need to be solved in institutional arrangements.The comparative study adopts the method of literature analysis to explore the measures and characteristics of setting up PbD in legal practice,technology adoption and commercial application in the United States and the European Union,as well as the enlightenment to China.[Result/Conclusion]Through the analysis,this article explores the legal,commercial and technical design requirements that should be paid attention to in setting up PbD,and provides reference for incorporating PbD into Chinese laws in the future and urging Chinese enterprises to adopt PbD.