信息安全研究 ›› 2017, Vol. 3 ›› Issue (2): 182-187.

• 法律法规 • 上一篇    下一篇

数据本地化立法问题研究

邓文   

  1. 华东政法大学知识产权学院上海200042
  • 收稿日期:2017-02-20 出版日期:2017-02-15 发布日期:2017-02-20
  • 通讯作者: 邓文
  • 作者简介:邓文 硕士研究生,主要研究方向为知识产权和网络安全.

Research on the Legislation of Data Localization

  • Received:2017-02-20 Online:2017-02-15 Published:2017-02-20

摘要: 当前国际形势下,对数据进行本地化立法以及立法规定具体适用的研究已经成为时下讨论的热点.于2016年11月初高票通过的《网络安全法》基本确立了“数据境内存储为原则、安全评估为例外”的数据本地化立法规定,但对这一规定的具体适用存在诸多亟待解决的难题.在充分论证数据本地化立法正当性的基础上,对规定中出现的公民“个人信息”的合理界定提出了一些思考,例如在对个人信息进行认定时是否应考虑信息需具备商业价值,以及对于必须结合在后数据才能发挥特定识别作用的单条信息性质的理解.同时,在涉及跨境数据安全评估方面,应因时制宜、因地制宜,分阶段、分目标出台安全评估标准,对于容易因时间因素导致价值大幅贬损的数据,进行“从宽评估”、“优先评估”,缩短评估时长,实现数字贸易及数据价值.以此为接下来网络安全法的落地实施提供思路及借鉴.

关键词: 网络安全, 数据本地化, 个人信息, 安全评估, 贸易

Abstract: Under the current international situation, the research on whether the data should be localized legislation and the application of the specific provisions of the legislation has become a hot topic of discussion nowadays. In November 2016, the Cyber Security Law was adopted and it has established a principle to the legislation of data localization which is “the data should be stored locally under normal circumstances, but except the safety assessment if the data must be transmitted across borders”. However, there are many complex challenges to apply the principle. On the basis of fully demonstrating the legitimacy of data localization legislation, this thesis also put forward some ideas on the reasonable definition of the “privacy information”. Simultaneously, when it comes to the safety assessment, the assessment standards should put forward according to changing circumstances and local conditions, and to the data which was easily affected by time, it should be evaluated by the guidelines of “leniency assessment” and “priority assessment” for realizing the trade and the data value timely. At last this thesis put forward some thoughts and references for the implementation of the Cyber Security Law.

Key words: cyber security, data localization, privacy information, safety assessment, trade