GDPR“数据保护官”制度探析——兼论其对中国的启示

Analysis of GDPR "Data Protection Officer" Mechanism and Its Enlightenment to China

本文首先结合欧盟其他与数据保护相关的数据法律文件,对 GDPR 中的“数据保护官”制度进行了全面的介绍和解构。而想要对该制度进行更深层次的探究,还需立足“数据保护官”制度在立法过程中和生效前后的争议焦点,剖析不同利益团体对该制度的需求和态度。在这样的研究基础上,本文试图讨论 GDPR 全面实施后,“数据保护官”制度对不同主体产生的具体影响;并对中国如何构建类似制度,提出一些建议。

This paper firstly introduces and deconstructs the "data protection officer" mechanism in GDPR in combination with other related data protection legal documents in EU. In order to do a deeper research of the mechanism, it is necessary to base on the main issues which were discussed in the legislative process, and to focus on the disputes happened before and after the entry into force, and then analyze the needs and attitudes of different interest groups to the mechanism. On the basis of such research, this paper attempts to discuss the specific impact of the "data protection officer" mechanism on different subjects after the GDPR implemented around EU;and make some suggestions on how to construct a similar mechanism in China.