网约车平台个人信息合规治理之探

Exploring Personal Information Compliance Governance of Network Car Platforms

聚集着海量个人信息的网约车平台发展迅速,其具有的运营安全保障义务要求保障乘客的各项合法权益,但在实际运营中却存在着个人信息处理类以及安全保障类合规风险。在应对此类风险时,平台存在由个人信息保护素养不足导致的合规风险预防不力、由信息不对称导致的合规风险识别滞后、由合规成本高昂导致的合规风险应对消极等困境。为有效防范与应对个人信息保护合规风险,平衡个人信息的开放与安全价值,网约车平台需进行技术协同下的智慧合规建设,包括基于知识图谱技术进行个人信息保护合规政策设计、搭建个人信息保护合规组织体系并进行人员培训、基于区块链技术进行个人信息保护合规流程设计。形成“技术+制度”的合规治理体系,实现预防个人信息侵权风险、减轻合规治理负担、有效衔接内外监管等合规治理目的。

The development of ride hailing platforms,which gather massive amounts of personal information,is rapid.Their operational security obligations require the protection of the legitimate rights and interests of passengers.However,in actual operation,there are compliance risks related to personal information processing and security protection.When dealing with the compliance risk of personal information protection,the platform has some difficulties,such as poor prevention of compliance risk caused by insufficient personal information protection literacy,lagging identification of compliance risk caused by information asymmetry,and negative response to compliance risk caused by high compliance cost.In order to effectively prevent and deal with the compliance risks of personal information protection,and balance the openness and security value of personal information,the online car platform needs to carry out smart compliance construction under the technical cooperation,including the design of personal information protection compliance policy based on knowledge map technology,the establishment of personal information protection compliance organization system and personnel training,and the design of personal information protection compliance process based on blockchain technology.Establish a compliance governance system of“technology+system”to prevent the risk of personal information infringement,reduce the burden of compliance governance,and effectively connect internal and external supervision.