我国企业数据合规的“三维”法律体系构建  

The Construction of“Three-Dimensional”Legal System for Chinese Corporate Data Compliance

作　　者：杨猛 YANG Meng

机构地区：[1]同济大学法学院人工智能社会治理协同创新中心

出　　处：《上海政法学院学报（法治论丛）》2024年第4期87-99,共13页Journal of Shanghai University of Political Science & Law(The Rule of Law Forum)

基　　金：2022年度上海市哲学社会科学一般项目“衍生性数据犯罪的动态刑事风险与类型化规制”的阶段性研究成果,项目编号:2022BFX008;2022年度中央高校基本科研业务费专项资金资助项目“交通运输系统数字化转型之刑事风险与类型化规制研究”的阶段性研究成果,项目编号:22120230354。

摘　　要：企业数据合规是激发企业“自律机制”的重要前提,建立数据合规体系对提升法治规范效能具有重要意义。针对我国企业数据合规权利边界不明确、覆盖范围不全面、监管方式不清晰的现状,应当借鉴德国合规原则明确、合规范围广泛、合规程序规范的立法特点。从主体、对象和程序出发,通过建立数据合规的法人治理结构、明确数据合规的风险等级分类、厘清数据合规的多级监管程序,才能构建具有中国特色的企业数据合规“三维”法律体系。Corporate data compliance is an important prerequisite for stimulating the“self-disciplinary mechanism”of enterprises,and the establishment of a data compliance system is of great significance in enhancing the effectiveness of the rule of law.In view of the status quo that the right boundary of China’s corporate data compliance is not clear,the coverage is not comprehensive,and the regulatory approach is not standardized,we should learn from Germany’s legislative features of clear compliance principles,broad compliance scope,and standardized compliance procedures.From the perspectives of subject,object and procedure,it is supposed to establish a corporate governance structure for data compliance,to specify the risk level classification for data compliance,and to clarify the multi-level regulatory procedures for data compliance,so as to build a“three-dimensional”legal system for corporate data compliance with Chinese characteristics.

关 键 词：企业合规 数据合规 法律体系建构 法律风险防范 中德比较研究 

分 类 号：D914[政治法律—刑法学]