从认证全过程视角理解与完善个人信息保护认证制度
网络安全与数据治理 11期
聂磊磊
（中国人民公安大学法学院，北京100038）
摘要： 个人信息保护认证与个人信息跨境提供中其他出境制度相比，可以实现个人信息安全与自由流动之间的平衡，比安全评估制度具有更自由的流动性，比标准合同具有更稳定的安全性。在全球数据经济逐渐占据主导地位的今天，个人信息保护认证制度有其巨大的实施价值。同时，认证机构作为个人信息保护认证中关键的一环，要求认证机构具有公平性和专业性的资质，在认证中保持客观中立并发挥应有的专业水平。然而，个人信息保护认证制度在我国刚刚起步不久，相关法律规定还不完善，具体落实的几个方面都存在不足，主要包括认证前启动、认证中审查和认证后担责。因此，在认证前启动要秉持自愿认证与强制认证相结合；在认证中扩大可申请认证的主体范围，并建立分级分类认证标准制度；在认证后完善私法和公法双重救济途径。
中圖分類號：TP315
文獻標識碼：A
DOI:10.19358/j.issn.2097-1788.2023.11.008
引用格式：聶磊磊.從認證全過程視角理解與完善個人信息保護認證制度［J］.網(wǎng)絡安全與數(shù)據(jù)治理，2023，42（11）：39-45.
文獻標識碼：A
DOI:10.19358/j.issn.2097-1788.2023.11.008
引用格式：聶磊磊.從認證全過程視角理解與完善個人信息保護認證制度［J］.網(wǎng)絡安全與數(shù)據(jù)治理，2023，42（11）：39-45.
Understand and improve the personal information protection certification system from the perspective of the whole certification process
Nie Leilei
（School of Law,People′s Public Security University of China,Beijing 100038,China）
Abstract： Compared with other export systems in the cross-border provision of personal information, personal information protection certification can achieve a balance between personal information security and free flow, and has freer mobility than the security assessment system, and has more stable security than standard contracts. Today, when the global data economy is gradually dominant, the personal information protection certification system has great implementation value. At the same time, as a key part of personal information protection certification, certification bodies are required to have fair and professional qualifications, maintain objectivity and neutrality in certification and give full play to their due professional level. However, the personal information protection certification system has just started in China, and the relevant laws and regulations are not perfect, and there are deficiencies in several aspects of specific implementation, mainly including pre-certification start, certification review and post-certification responsibility. Therefore, the combination of voluntary certification and compulsory certification should be adhered to before certification; Expand the scope of subjects that can apply for certification in certification, and establish a hierarchical and classified certification standard system; Improve the dual remedies of private law and public law after certification.
Key words : personal information export; personal information protection certification; certification bodies; the whole process of certification; equity of interests
0引言
個人信息保護認證是個人信息出境中與安全評估、標準合同并列的出境制度，除了法律等有例外規(guī)定的場合，一般個人信息出境都可以適用認證制度。認證制度在我國傳統(tǒng)領域經(jīng)常適用，但自《個人信息保護法》實施后，個人信息保護認證制度才開始運用于我國個人信息出境的場景。雖然運用至今仍在不斷發(fā)布指南為其具體落實提供指引，但實施的效果差強人意。因此，有必要對個人信息保護認證制度實施以來的情況進行分析，以實現(xiàn)個人信息安全與自由流動之間的利益衡平。
本文下載請點擊：從認證全過程視角理解與完善個人信息保護認證制度AET-電子技術應用-最豐富的電子設計資源平臺 (chinaaet.com)
作者信息：
聶磊磊
（中國人民公安大學法學院，北京100038）
此內容為AET網(wǎng)站原創(chuàng)，未經(jīng)授權禁止轉載。