摘要
欧盟于近期正式颁布实施了《通用数据保护法案》(GDPR)。该法案的进步意义主要体现在,对个人数据的定义及对儿童数据和个人生物学数据的着重保护,对法案涉及主体的权利义务的规定,以及在管辖权上运用的以地域管辖为基础的长臂管辖原则。同时,法案在数据主体的权利属性上将数据权归为人身权,并规定数据控制者和处理者要承担广泛的注意和通知义务,一旦违反将承担极重的赔偿责任。而正是由于数据权的人身权属性以及法案条款的具体规定,该法案并不会像外界担心的那样,对区块链等网络技术的发展产生阻碍,甚至是颠覆其赖以存在的核心技术基础。此法案相对于日本《个人信息保护法》的保守,以及美国数据隐私保护制度的零散和止步不前,是巨大进步,对我国相关领域的立法具有借鉴意义。
The EU officially enacted the General Data Protection Regulation(hereinafter"GDPR")on May 25,2018.This Regulation uses the principle of long-arm jurisdiction,and enhances protection of children’s personal information and personal biological information.At the same time,GDPR classifies data rights as personal rights,and provides data controllers and processors with extensive attention and notification obligations,which will result in heavy compensation if data controllers and processors breach them.And because the data right is a personal right,this regulation does not have a material impact on the existence of blockchain technology.Compared with the Japanese Personal Information Protection Law and the US data privacy protection system,GDPR is a great progress and can be used as reference for China’s relevant fields.
