GDPR拒绝权及其对中国的启示

Right to Object in GDPR and its Enlightenments to China

欧盟GDPR通过赋予数据主体拒绝权进一步增强数据主体对其个人数据的控制。考察欧盟GDPR近三年的实施,发现存在适用效果不佳、词语内容不清导致条款适用范围不明、限制条件可能产生凌驾风险等问题。我国《个人信息保护法》正在制定中,对GDPR拒绝权规定及其实施效果的考察对我国相关权利的设立有重要启示:将拒绝权作为一项单独权利进行规定并明确其适用范围,针对不同情形设置拒绝权的限制条件,同时制定配套司法解释,在权利实施过程中谨慎行使自由裁量权,以确保个人合法权益与公共利益之间的平衡。

EU GDPR further strengthens the data subject's control over their personal data by granting the data subject the right to object.After reviewing the implementation of EU GDPR in the past three years,it was found that there were problems such as poor implementation of the right to object,unclear content of words that led to the unclear scope of application of the terms and possible overriding risks due to restrictions.Personal Information Protection Law is being formulated.The investigation of GDPR's right to object and its effect of implementation has important implications for the establishment of relevant rights:regulate the right to object as a separate right and clarify its scope of application,set restrictions on the right to object for different situations,formulate supporting judicial interpretations,and exercise discretion cautiously to ensure a balance between the rights of individuals and the public interests.