基于GDPR的个人数据保护企业自评指标体系研究  

Research on Self-evaluation Index System of Personal Data Protection Based on GDPR

作　　者：许济沧[1] 安小米[1,2,3] 孙嘉睿 吴国娇 汪力 Xu Jicang;An Xiaomi;Sun Jiarui;Wu Guojiao;Wang Li(School of Information Resource Management School,Renmin University of China,Beijing 100872;Key Laboratory of Data Engineering and Knowledge Engineering,Ministry of Education,Beijing 100872;Smart City Research Center,Renmin University of China,Beijing 100872)

机构地区：[1]中国人民大学信息资源管理学院,北京100872 [2]数据工程与知识工程教育部重点实验室,北京100872 [3]中国人民大学智慧城市研究中心,北京100872

出　　处：《图书情报工作》2018年第23期113-118,共6页Library and Information Service

基　　金：国家社会科学基金重大项目"国家数字档案资源整合与服务机制研究"(项目编号:13&ZD184)研究成果之一

摘　　要：[目的/意义]为解决我国企业面对欧洲《通用数据保护法》(GDPR)的涉欧个人数据管理难题,建立完善我国个人数据保护评价性指标体系,促进我国企业个人数据保护管理工作。[方法/过程]结合GDPR的具体条款,采用AHP层次分析法,构建一套基于GDPR适用于中国企业的个人数据保护自评指标体系。[结果/结论]指标体系可满足现有企业应对GDPR开展自评的基本需求。同时体系中由GDPR条款所衍生出的指标对完善《信息安全技术个人信息安全规范》等国家标准有参考性价值。[ Purpose/significance ] This paper aims to solve the problem of China＇ s enterprises facing the European General Data Protection Regulation （GDPR） related European personal data management problems and to establish and improve China＇ s personal data protection evaluation index system, promoting the management of corporate personal data protection in China. [ Method/process ] Based on the specific terms of GDPR, this paper uses AHP analytic hierarchy process to construct a self-evaluation index system for personal data protection based on GDPR for Chinese enterprises. [ Result/conclusion ] The index system can meet the basic needs of existing enterprises to carry out self-evaluation of GDPR. At the same time, the indicators derived from the GDPR clause in the system have reference value for improving national standards such as Information Security Technology Personal Information Security Regulations.

关 键 词：GDPR 个人数据保护 指标体系 层次分析 

分 类 号：G203[文化科学—传播学]