摘要
从理论根源和功能价值出发,GDPR数据主体同意制度以保护人格尊严为核心,以技术向善为导向,将“数据主体的同意”作为数字经济企业收集和处理个人数据最重要的合法性基础。数据主体的有效同意须由数据主体自由、特定、知情、明确作出。中国数字经济企业须以CNIL vs.Google LLM等案为戒,积极承担合规义务,同时设立数据保护专员,强化企业内部数据治理与监督机制,自主或者委托第三方开展数据治理与风险评估,对标GDPR完善企业隐私政策并通过技术设计充分保障数据主体同意权,防控企业法律风险。
Starting from the theoretical sources and functional value,the data subject’s consent system of GDPR takes the protection of personal dignity as the core,guiding technology to develop in a good direction as the orientation.And the“consent of data subject”has been seen as the most important legal basis for digital economic enterprises to collect and process personal data.The effective consent of the data subject must be made by the data subject freely,specifically,knowingly and explicitly.Chinese digital economy enterprises are supposed to reach out to the world and advance in the fierce international competition,they should learn from the CNIL vs.Google LLM and assume obligations of relative acts.Aiming at taking legal risks under control,Chinese digital economy enterprises should actively undertake the obligation to comply with GDPR,Chinese digital economy enterprises should set up data protection officers,strengthen internal data governance and supervision mechanisms,entrust third parties to conduct data governance and risk assessment or independently do that,improve corporate privacy policy according to the GDPR and fully guarantee the right of consent of data subjects by technical means.
作者
邹珊
傅思宇
罗珏
马韔
ZOU Shan;FU Siyu;LUO Jue;MA Chang(Economic Law School,Southwest University of Political Science&Law,Chongqing 401120,China)
出处
《成都理工大学学报（社会科学版）》
2020年第1期61-67,共7页
Journal of Chengdu University of Technology:Social Sciences
基金
2018年西南政法大学学生科研创新项目资助(2018XZXS-175)
关键词
一般数据保护条例
数字经济企业
个人数据
General Data Protection Regulation
digital economic enterprise
personal data
