以文件管理为中心的机构信息治理研究:基于Facebook事件的分析  

Research on Institutional Information Governance Centered on Records Management: Based on Analysis of Facebook Data Scandal

作　　者：李思艺 田园 Li Siyi

机构地区：[1]中国人民大学信息资源管理学院,北京100872 [2]中国船舶工业综合技术经济研究院,北京100081

出　　处：《情报理论与实践》2020年第8期84-89,共6页Information Studies:Theory & Application

基　　金：中国人民大学2018年度拔尖创新人才培育资助计划成果。

摘　　要：[目的/意义]数字环境下,个人数据保护对机构可持续发展具有重要影响。[方法/过程]文章以Facebook个人数据泄漏事件为契机,以国际文件经理与主管协会的《信息治理成熟度模型》为分析框架,结合欧盟的《通用数据保护条例》,对机构个人数据保护与信息治理关系进行探究。[结果/结论]研究发现,2016年出台的《通用数据保护条例》将文件管理职责纳入了机构负责个人数据保护的两大主体,即数据控制者和数据处理者的工作范围。文件管理是机构信息治理的核心职能,可以从协助机构履职、帮助机构合规运行和建立信任关系三个方面对机构个人数据保护起到一定的支撑作用,因此,机构个人数据保护需要建立以文件管理为中心的信息治理框架。[Purpose/significance] In context of digital environment,personal information protection has important influence on the sustainable development of the organization.[Method/process] This article takes Facebook data scandal as an introduction to examine the relationship between personal data protection and information governance based on Information Governance Maturity Model by ARMA International and General Data Protection Regulations newly issued by European Union.[Result/conclusion] The findings show that the function of records management was included as requirements in the responsibilities of personal data controller and processer in GDPR 2016.As one of the core components of information governance framework,records management can play a supporting role in protecting the personal information of organizations from three aspects:assisting agencies in performing their duties,helping agencies to operate in a compliant way and establishing trust relationships with customers,which means that personal information protection may require records management.

关 键 词：个人数据保护 信息治理 文件管理 Facebook事件 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]