大数据时代下欧盟数据可携带权的风险和启示

Risks and insights of EU data portability in the era of big data

数据可携带权是欧盟于2018年生效的一项新兴权利,允许数据主体不受阻碍地将个人数据传输给另一个数据控制者。研究数据可携带权对我国个人数据保护体系的建构、国内互联网企业走向国际市场都将起到积极促进的作用。通过对欧盟《一般数据保护条例》中的立法规定及其实施现状进行分析,发现该条款实质上已沦为僵尸条款,并未发挥预期的功能。我国在《中华人民共和国个人信息保护法》中确立了此项权利,在后续相关制度规定时应当参考欧盟经验,对数据可携带权的客体范围进行限缩,加强政府部门分层级监管,实现数据可携带权的中国本土化。

The right to data portability,introduced in the European Union in 2018,empowers data subjects to transfer personal data unimpeded to another data controller.An investigation into this emerging right contributes positively to the construction of China′s personal data protection system and propels domestic internet enterprises onto the global stage.By scrutinizing the legislative stipulations in the EU General Data Protection Regulation and examining the current status of its implementation,it is discerned that the provision essentially operates as a dormant clause,failing to deliver its intended function.As China has enshrined this right in the Personal Data Protection Law of the People′s Republic of China,it should draw upon the EU′s regulatory experiences.This includes limiting the scope of the right to data portability,strengthening hierarchical oversight by governmental departments,and actualizing the localization of data portability rights within China′s jurisdiction.