试析GDPR影响下奥运赛事承办方跨境传输个人数据的合规义务——以2022年北京冬奥会为例  

An Analysis of the Compliance Obligations of the Olympic Games Organizers to Cross-border Transmission of Personal Data under GDPR: The Case of 2022 Beijing Winter Olympics

作　　者：裘韵 QIU Yun(Kenneth Wang School of Law,Soochow University,Suzhou 215006,China)

机构地区：[1]苏州大学王健法学院

出　　处：《体育科学》2019年第7期80-91,共12页China Sport Science

基　　金：第59批中国博士后科学基金一等资助项目(2016M590491)

摘　　要：欧盟《一般数据保护条例》的出台不仅促使世界反兴奋剂机构修订了保护运动员隐私与个人信息的国际标准,还影响到国际大型体育赛事的运营规范,以2022年北京冬奥会为代表的奥运赛事在“办奥新规范”的指导下将直面数据保护要求带来的挑战。基于奥运赛事承办合同的更新与世界反兴奋剂机构制定的国际标准的强制性要求,奥运会的承办方将在收集与移交因赛事而产生的跨境传输个人数据方面负担各项合规义务。在此过程中,以欧盟《一般数据保护条例》为代表的各国数据保护立法、东道国相关的法律法规及反兴奋剂层面的国际标准将对承办方履行义务产生重要影响。同时,不可忽略实践中存在的合同操作要求的追溯适用、数据主体“知情同意”权利、国际体育组织的数据接收资格及东道国监管行为的约束等问题。建议利益相关方采取订立数据保护补充协议的方式协调各方利益,以解决参赛者与消费者对其个人信息权利的担忧,并建立个人数据跨境传输的合规监管机制以保障协议得到充分履行。对于我国而言,奥组委在筹办2022年北京冬奥会的过程中有必要借鉴相关经验,结合实际情况,对个人数据跨境传输的合规性进行审查与监督。The promulgation of the EU General Data Protection Regulation not only prompted the World Anti-Doping Agency to revise the Standard for the Protection of Privacy and Personal Information,but also affected the operation norms of major international sports events.The Olympic events represented by the 2022 Beijing Winter Olympics will face the challenges brought by the data protection requirements under the guidance of the “New Norm”.Due to the renewal of the Olympic host city contracts and the mandatory requirements of the international standards formulated by the World Anti-Doping Agency,the organizers of the Olympic Games will burden various compliance obligations in collecting and transferring cross-border transmission of personal data arising from the Games.In this process,the global data protection legislation represented by the General Data Protection Regulation,the relevant laws and regulations of the host country and the international standards for anti-doping will have an important impact on the performance of the contractor's obligations.At the same time,we should not ignore such issues in practice as the retrospective application of contractual operation requirements,the right of informed consent of data subjects,the qualification for data acceptance of international sports organizations and the constraints of host country's regulatory behavior.It is suggested that stakeholders should coordinate the interests of all parties by concluding supplementary agreements on data protection,so as to resolve the concerns of participants and consumers about their personal information rights,and establish a regulatory mechanism for cross-border transmission of personal data to ensure the full implementation of the agreements.For China,it is necessary for the Organizing Committee for the Olympic Games to learn from the relevant experience and take appropriate measures in the process of organizing the 2022 Beijing Winter Olympics to review and supervise the cross-border transmission of personal data in light of the

关 键 词：个人信息保护 数据跨境传输 合同义务 反兴奋剂 格式条款 

分 类 号：G80-05[文化科学—运动人体科学]