论个人信息保护负责人制度及对DPO的借鉴

On the personal information protection responsible person system and the reference to DPO

《中华人民共和国个人信息保护法》新增的个人信息保护负责人制度备受关注,其与欧盟《通用数据保护条例》(《GDPR》)中数据保护官(DPO)制度相似,但DPO制度起步早,具体规定更为完善,分析其优势对中国维护数据安全及促进经济发展具有重要意义。文章通过梳理《GDPR》《中华人民共和国个人信息保护法》《个人信息安全规范》,发现个人信息保护负责人制度还存在关键用语表述不一致等问题,进而思考如何将DPO制度的优势融入个人信息保护负责人制度。

The new personal information protection officer system in the“People's Republic of China Personal Information Protection Law”has attracted a lot of attention,which is similar to the data protection officer(DPO)system in the European Union's“General Data Protection Regulation”(“GDPR”)in terms of its functions and other aspects.However,the DPO system has started earlier,and its specific provisions are more complete,so analyzing its advantages is of great significance to China's safeguarding of data security and promotion of e⁃conomic development.By combing the“GDPR”,the“People’s Republic of China Personal Information Protection Law”,and the“Code of Personal Information Security”,the article finds that the DPO system still has problems such as inconsistencies in the expression of key terms,and then considers how to integrate the advantages of the DPO system into the personal information protection officer system.