美国保护个人数据隐私的法律法规及监管体系

Laws, Regulations and Regulatory System of Personal Data Privacy Protection in the United States

当前,个人数据隐私的立法和监管成为全世界关注的热点问题。本文通过整理汇总美国在个人数据隐私方面的立法和近年来的监管实践,发现美国出于产业利益对数据保护的法律规定较为宽松,坚持以市场为主导,以行业自律为主要手段,辅以政府监管的模式。但由于近年频发的数据隐私泄露丑闻,美国各界针对加强个人数据保护和监管提出了各自的解决方案。美国的问题和经验对我国有重要参考意义。我们应平衡好保护和利用的关系,强化数据安全意识,建立顶层协调机制,完善法律监管体系。

At present, the legislation and regulation of personal data privacy has become a world issue. This paper summarizes the legislation and recent regulatory practices in the United States, and we find that out of industrial interests the legal provisions of data protection are relatively loose in the U.S.. It insists on market-oriented model which applies industry self-discipline as the main means, supplemented by government regulation. However, due to the frequent data breach scandals in recent years, various groups in the U.S. have proposed their own solutions. The problems and experiences of the U.S. are of great significance to China. We should balance the protection and utilization, strengthening the awareness of data security, establishing a top-level coordination mechanism, and improving the legal supervision system.