美国数据泄露通知制度研究

Research on American Data Breach Notification System

为应对日益频繁的数据泄露事件,具有及时止损功能的数据泄露通知制度逐渐受到各法治国家的重视。美国是世界上最早确立数据泄露通知制度的国家,截至2018年,其50个州均颁布了数据泄露通知法,内容涉及触发条件、通知流程、处罚机制等诸多方面。通过对美国各州立法的考察,可以为我国的数据泄露通知制度立法提供借鉴。在立法模式层面,国家应出台详尽的数据泄露通知规范;在立法理念层面,应在保护消费者权益的同时兼顾数据处理者的利益;在立法技术层面,应当从触发条件、通知流程、处罚机制等方面制定系统完善的数据泄露通知规则。

In response to data leakage incidents,the data leakage notification system with timely stop loss function is gradually receiving attention from various countries.The United States is the first country in the world to establish a data breach notification system.As of 2018,all 50 states have enacted data breach notification laws,which cover many aspects such as triggering conditional notification processes and penalty mechanisms.Through the investigation of the legislation of the states in the United States,it can provide reference for the legislation of the data leak notification system in China.