从认证全过程视角理解与完善个人信息保护认证制度
网络安全与数据治理 11期
聂磊磊
（中国人民公安大学法学院，北京100038）
摘要： 个人信息保护认证与个人信息跨境提供中其他出境制度相比，可以实现个人信息安全与自由流动之间的平衡，比安全评估制度具有更自由的流动性，比标准合同具有更稳定的安全性。在全球数据经济逐渐占据主导地位的今天，个人信息保护认证制度有其巨大的实施价值。同时，认证机构作为个人信息保护认证中关键的一环，要求认证机构具有公平性和专业性的资质，在认证中保持客观中立并发挥应有的专业水平。然而，个人信息保护认证制度在我国刚刚起步不久，相关法律规定还不完善，具体落实的几个方面都存在不足，主要包括认证前启动、认证中审查和认证后担责。因此，在认证前启动要秉持自愿认证与强制认证相结合；在认证中扩大可申请认证的主体范围，并建立分级分类认证标准制度；在认证后完善私法和公法双重救济途径。
中图分类号：TP315
文献标识码：A
DOI:10.19358/j.issn.2097-1788.2023.11.008
引用格式：聂磊磊.从认证全过程视角理解与完善个人信息保护认证制度［J］.网络安全与数据治理，2023，42（11）：39-45.
文献标识码：A
DOI:10.19358/j.issn.2097-1788.2023.11.008
引用格式：聂磊磊.从认证全过程视角理解与完善个人信息保护认证制度［J］.网络安全与数据治理，2023，42（11）：39-45.
Understand and improve the personal information protection certification system from the perspective of the whole certification process
Nie Leilei
（School of Law,People′s Public Security University of China,Beijing 100038,China）
Abstract： Compared with other export systems in the cross-border provision of personal information, personal information protection certification can achieve a balance between personal information security and free flow, and has freer mobility than the security assessment system, and has more stable security than standard contracts. Today, when the global data economy is gradually dominant, the personal information protection certification system has great implementation value. At the same time, as a key part of personal information protection certification, certification bodies are required to have fair and professional qualifications, maintain objectivity and neutrality in certification and give full play to their due professional level. However, the personal information protection certification system has just started in China, and the relevant laws and regulations are not perfect, and there are deficiencies in several aspects of specific implementation, mainly including pre-certification start, certification review and post-certification responsibility. Therefore, the combination of voluntary certification and compulsory certification should be adhered to before certification; Expand the scope of subjects that can apply for certification in certification, and establish a hierarchical and classified certification standard system; Improve the dual remedies of private law and public law after certification.
Key words : personal information export; personal information protection certification; certification bodies; the whole process of certification; equity of interests
0引言
个人信息保护认证是个人信息出境中与安全评估、标准合同并列的出境制度，除了法律等有例外规定的场合，一般个人信息出境都可以适用认证制度。认证制度在我国传统领域经常适用，但自《个人信息保护法》实施后，个人信息保护认证制度才开始运用于我国个人信息出境的场景。虽然运用至今仍在不断发布指南为其具体落实提供指引，但实施的效果差强人意。因此，有必要对个人信息保护认证制度实施以来的情况进行分析，以实现个人信息安全与自由流动之间的利益衡平。
本文下载请点击：从认证全过程视角理解与完善个人信息保护认证制度AET-电子技术应用-最丰富的电子设计资源平台 (chinaaet.com)
作者信息：
聂磊磊
（中国人民公安大学法学院，北京100038）
此内容为AET网站原创，未经授权禁止转载。