第三方数据信托:数据控制者义务的困境及其破解

Data Trust in the Form of a Third Party:The Dilemma of Data Controllers’Obligations and Its Solution

第三方数据信托的提出旨在解决数据控制者面临的合同义务或信义义务双重困境。作为数据主体和数据控制者之间的中介,第三方数据信托机构对数据主体负有信义义务,通过对数据控制者的资质进行筛选,对数据处理活动进行监督,有效平衡数据的保护和利用之间的关系,重建数据市场的信任机制。第三方数据信托的机制构建以明确数据权属和定价为前提,以相关主体、信托标的和实现机制为基本内涵,以建立数据信托机构的准入和监督机制、明晰数据信托机构的基本责任以及引入数据领域的公益诉讼作为法律保障。

The third-party data trust is proposed to solve the dual dilemma of imposing contractual or fiduciary duties on data controllers.As an intermediary between the data subject and the data controller,the third-party data trust agency has a fiduciary duty to the data subject.By screening the qualifications of the data controller,supervising the data processing activities,third-party data trust institutions can effectively balance the relationship between data protection and utilization,and rebuild the trust mechanism of the data market.The mechanism of third-party data trusts is built on the premise of clarifying data ownership and pricing,with relevant subjects,trust objects and implementation mechanisms as its foundations.In addition,it is necessary to establish an access and supervision mechanism for data trust institutions and clarify their basic responsibilities,with the introduction of public interest litigation in the data field as a legal guarantee.