欧盟、美国敏感个人信息保护法律规制比较研究及我国立法特色分析

Comparative Study on the Legal Regulation of Sensitive Personal Information Protection in the European Union and the United States and Analysis on the Characteristics of Chinese Legislation

大数据时代,对敏感个人信息进行保护显得重要而迫切,欧盟、美国在敏感个人信息保护法律规制方面已积累了丰富的经验,对我国相关立法具有重要参考价值和意义。文章综合运用比较、文献分析等方法,通过相关研究综述引出研究缘由,然后将欧盟和美国的敏感个人信息保护法律规制进行对比,阐述二者的相同点及主要差异,最后分析了我国的立法特色。文章认为,我国的敏感个人信息保护立法吸收了欧盟、美国的有益经验,但又具有自身特色,主要表现为:由“分散立法”走向“统一立法”的法律规制特色模式;采用不完全列举的方式界分敏感个人信息类别,设置“兜底条款”,为未来留有扩充空间;注重敏感个人信息保护与公共利益、个人信息安全之间的平衡。

In the era of big data,it is important and urgent to protect sensitive personal information,and the EU and the US have accumulated rich experience in the legal regulation of sensitive personal information protection,which has important reference value and significance for the relevant legislation in China.The article uses the methods of comparison and literature analysis to introduce the reasons for the study through the review of relevant studies,and then compares the legal regulation of sensitive personal information protection in the EU and the US,explaining the similarities and main differences between them,and finally analyzing the legislative characteristics of China.The article argues that China's legislation on the protection of sensitive personal information has absorbed the useful experience of the EU and the US,but has its own characteristics,which are mainly manifested as follows:developing from"decentralized legislation"to"unified legislation";adopting the non-exhaustive enumeration approach to distinguish the categories of sensitive personal information and sets up"bottom clauses",leaving room for future expansion;focusing on the balance between the protection of sensitive personal information and public interest and personal information security.