信息安全研究 ›› 2021, Vol. 7 ›› Issue (11): 1063-.

• 学术论文 • 上一篇    下一篇

数据可携权的争议与制度反思

王若曦   

  1. (重庆邮电大学网络空间安全与信息法学院 重庆 400065)
  • 出版日期:2021-11-07 发布日期:2021-11-05
  • 通讯作者: 王若曦 硕士研究生,主要研究方向为网络法 598152813@qq.com
  • 作者简介:王若曦 硕士研究生,主要研究方向为网络法 598152813@qq.com

Controversy and System Reflection on the Right to Data Portability

  • Online:2021-11-07 Published:2021-11-05

摘要: 随着技术与法律的不断发展,数据主体在两者的共同推进下增加了其使用相互冲突的手段维护其数据权益的可能性。数据可携权经过数次修改作为一项独立的权利被规定于2016年通过的《一般数据保护条例》(GDPR)之中。数据可携权增强数据主体对个人数据控制力的同时赋予数据控制者更多的责任,引起学界极大的争论。各种争议的背后是博弈主体网络用户、网络平台及国家对数据可携权的态度与目的迥异不同。针对数据可携权的数据范围、合理保护第三方数据主体权利、原数据控制者能否保留数据主体相关个人数据的相关规定均存在漏洞,将个人数据划分为用户的基础数据及衍生数据,对两者的“可携带”采用不同的制度设计,力图在数据主体权利和数据控制者利益之间寻找一个合适的平衡点。


关键词: 数据可携权, 个人数据, 新型权利, 数据共享, 《一般数据保护条例》(GDPR)

Abstract: With the continuous development of technology and law, data subjects have increased the possibility of using conflicting methods to protect their data rights under the joint promotion of the two. The right to data portability has been revised several times as an independent right and was stipulated in the General Data Protection Regulation (GDPR) passed in 2016. The right to data portability enhances the data subject's control over personal data and at the same time gives the data controller more responsibilities, which has aroused great controversy in academia. Behind the various disputes are the very different attitudes and goals of the game's main players, network users, network platforms, and countries towards the right to data portability. Regarding the scope of data portability, the reasonable protection of the rights of third-party data subjects, and whether the original data controller can retain the personal data related to the data subject, there are loopholes. The personal data is divided into user basic data and derivative data. The "portability" of the two uses different system designs, trying to find a suitable balance between the rights of the data subject and the interests of the data controller.


Key words: data portability, personal data, new rights, data sharing, General Data Protection Regulation (GDPR)