《个人数据保护法》之数据可携权:新加坡经验与中国法的应用

Data Portability Under the Personal Data Protection Act: Singapore’s Experience and Application of Chinese Law

将数据可携权纳入个人数据保护法律体系的做法在发达国家日益普遍。新加坡作为数据强国对此已有较为充分的实践,特别是在系统化立法、专门机构设置、列举式阐释关键条文、分类管理各数据主体的权利义务等方面形成了具有一定影响力的行为范式规则集合体。相比之下,中国对该议题在立法和实践层面尚缺乏成熟经验。基于此,文章首先详细阐述了新加坡数据可携权的权属定性、权利构成及特征,从学理层面深度剖析新兴权利的缘起与结构;然后从新加坡应用效果出发,明确其存在的正当性并探讨潜在的风险;最后立足中国实践,分析数据可携权的立法现状,并对重点条款比较分析,提出协调法益、细化保护数据可携权利对象、分类数据可携权适用场景等三条制度设置建议,力图找寻个人数据保护、数据流通和国家数据安全的利益平衡。

At present, it is increasingly common to incorporate data portability into the legal system of personal data protection in developed countries. As a data power, Singapore has already fully practiced in this regard, especially in the aspects of systematic legislation, the establishment of specialized agencies, enumerative interpretation of key provisions, and classified management of the rights and obligations of various data subjects, which have formed a set of behavioral paradigm rules with certain influence. In contrast, China still lacks mature experience in legislation and practice on this issue. Based on this, this paper first elaborates on the ownership, composition and characteristics of data portability in Singapore, and deeply analyzes the origin and structure of emerging rights from the perspective of academic theory. Then, based on the application effects in Singapore, the legitimacy of its existence is clarified and the potential risks are discussed. Finally, based on Chinese law, the legislation status of data portability right is analyzed, the key clauses are compared, and three system-setting suggestions are put forward,namely, coordinating legal interests, refining the object of data portability right protection and classifying the applicable scenarios of data portability right in an effort to find the interest balance of personal data protection, data circulation and national data security from a larger perspective.