英国数据保护影响评估制度及其启示

Research on Data Protection Impact Assessment System in the UK

[目的/意义]从制度的角度,调查英国数据保护影响评估的制度支持,为我国数据保护影响评估制度构建提供参考,从而为政府保护公民隐私提供工具。[方法/过程]利用文献调研和案例分析的研究方法,以英国为例,通过对文献资料和网站内容的调查,获取一手资料阐述英国数据保护影响评估制度的发展历程,对数据保护影响评估内涵与特质、实施主体、实施阶段、适用情形进行梳理,并在此基础上分析英国数据保护影响评估制度的演化。[结果/结论]提出推进隐私阈值分析、加强利益相关者参与、注重第三方审核的建议。

[Purpose/significance]From the perspective of system,this paper investigates the system support of the privacy impact assessment in the UK to provide reference for the system formulation of the data protection impact assessment in China and provide tools for the government to protect citizens’privacy.[Method/process]Using the research methods of literature research and case analysis,taking the UK as an example,this paper expounds the development process of the data protection impact assessment system in the UK by obtaining first-hand materials through the investigation of literature and website contents,and sorts out the connotation and characteristics,implementer subject,implementation stage and application situation of data protection impact assessment.On this basis,it analyzes the evolution of the UK data protection impact assessment system.[Result/conclusion]This paper puts forward suggestions on advancing privacy threshold analysis,strengthening stakeholder participation,and focusing on third-party audit.