数据治理语境下公司社会责任的基本内涵和制度构建

The Basic Connotation and System Construction of Corporate Social Responsibility in the Context of Data Governance

个人数据泄露、数据歧视等兼具法律和道德要素的问题持续困扰着社会,这些问题的解决难以仅仅凭借监管者单方努力彻底根治。在'数据共治'的大格局下,作为数据治理参与者的公司在保护数据安全、实现数据正义等方面的作用不可小觑。公司法中的'公司社会责任'制度能够为互联网公司等主动式参与数据治理提供一定的规范指引。在此语境下,公司社会责任的基本内涵以网络社群关系为起点,并在实用主义的导向下,可以类型化为数据治理原则、数据治理法律义务以及数据行业习惯。同时,借鉴国外'经设计的数据保护'等模式,将公司社会责任预先'嵌入'数据处理的整个生命周期之中,在解决'公司社会责任'规范可操作性差、缺乏约束力等弊端的同时,亦能为公司提供参与治理的正当性基础和基本路径。

The problems of personal data leakage and data discrimination,which have both legal and moral factors,continue to plague the society.The solution of these problems is hard to be completely cured by the regulators.In the context of the'data co-governance',companies as participants in data governance play an important role in protecting data security and realizing data justice.The system of corporate social responsibility(CSR)in company law can provide some normative guidance for Internet companies to participate in data governance actively.In this context,the basic connotation of CSR takes the Internet community relationship as the starting point.Under the guidance of pragmatism,CSR can be divided into data governance principles,data governance legal obligations and data industry habits.At the same time,drawing lessons from foreign models such as Data Protection by Design,CSR is embedded in the whole life cycle of data processing in advance,while can get rid of such disadvantages as poor maneuverability and lack of binding force of CSR and provide the legitimate basis and basic path for companies to participate in data governance.