中国个人信息泄露通知制度--以自由裁量规制为视角  

The Breach Notification System in China--From the Perspective of Discretion Regulation

作　　者：唐林[1,2] 杨力 Tang Lin;Yang Li(Koguan School of Law,Shanghai Jiao Tong University,Shanghai 200030,China;China Institute for Smart Court,Shanghai Jiao Tong University,Shanghai 200030,China)

机构地区：[1]上海交通大学智慧法院研究院,上海200030 [2]上海交通大学凯原法学院,上海200030

出　　处：《科技与法律（中英文）》2022年第4期115-122,共8页Science Technology and Law（Chinese-English Version）

基　　金：National Social Science Fund Major Project of China on"Legalization of Technology Standards for Public Data in China"(21&ZD200)。

摘　　要：《中华人民共和国个人信息保护法》第57条确立了个人信息泄露通知制度,其内在机制很大程度上借鉴了欧盟的GDPR。如何规范该制度赋予个人信息处理者的自由裁量空间,建立行政监管的协调机制,引起了公众的广泛关注。其中,关于”裁量空间”的合理制约是个人信息泄露通知制度的核心。立足于”结构化裁量权”的分析框架,通过分析声誉制裁和第三方执法策略,提出在完善个人信息泄露通知制度方面,应重点关注裁量空间的常态化约束、外在监管指标的弱化和个人信息泄露通知内容的有效性。Article 57 of the Personal Information Protection Law of the People's Republic of China establishes the breach notification system for the first time,which largely derives from the General Data Protection Regulation(GDPR).The discussion on how to regulate the discretion of processors and build a coordinated mechanism be‐tween regulatory authorities and regulated entities has raised public concern.In particular,proper regulation for"discretion"is the key to the effective operation of the breach notification system.By drawing reference from"structuring discretion",this paper analyzes the theoretical framework of reputation sanctions and third-party en‐forcement strategy.It proposes to focus on the regular supervision of discretion,weakening clear regulatory indi‐cators,and the effectiveness of notification content in terms of the improvement of the breach notification system.

关 键 词：个人信息保护 泄露通知 第三方执法策略 裁量空间 

分 类 号：D912[政治法律—法学]