Changes and Adjustments:The Rule of Law Response to Medical Institution Data Compliance  

变迁与调适:医疗机构数据合规的法治因应

作　　者：Long Keyu 龙柯宇(西南政法大学民商法学院,重庆401120)

机构地区：[1]Civil and Commercial Law School,Southwest University of Political Science and Law,Chongqing 401120,China

出　　处：《科技与法律（中英文）》2024年第5期110-122,共13页Science Technology and Law（Chinese-English Version）

摘　　要：Medical institution data compliance is an exogenous product of the digital society,serving as a crucial means to maintain and balance the relationship between data protection and data sharing,as well as individual interests and public interests.The implementation of the Healthy China Initiative greatly benefits from its practical significance.In practice,data from medical institutions takes varied forms,including personally identifiable data collected before diagnosis and treatment,clinical medical data generated during diagnosis and treatment,medical data collected in public health management,and potential medical data generated in daily life.In the new journey of comprehensively promoting the Chinese path to modernization,it is necessary to clarify the shift from an individual-oriented to a societal-oriented value system,highlighting the reinforcing role of the trust concept.Guided by the principle of minimizing data utilization,the focus is on the new developments and changes in medical institution data in the postpandemic era.This involves a series of measures such as fulfilling the obligation of notification and consent,specifying the scope of data collection and usage,strengthening the standardized use of relevant technical measures,and establishing a sound legal responsibility system for data compliance.Through these measures,a flexible and efficient medical institution data compliance system can be constructed.医疗机构数据合规是数字社会的外生产物,也是维系和平衡数据保护与数据共享、个人利益与公共利益之间关系的重要途径,对于健康中国战略的实施具有重大现实意义。实践中,医疗机构数据囊括了诊疗前收集的个人身份识别数据、诊疗中产生的临床医疗数据、公共卫生管理中收集的医疗数据、日常生活中产生的潜在医疗数据等主要样态。在全面推进中国式现代化的新征程上,应明晰从个人本位向社会本位的价值转向,凸显信赖理念的补强作用,以数据利用的最小化原则为指南,着眼于后疫情时代医疗机构数据的新发展和新变化。与此同时,通过履行告知同意义务、明确数据收集和使用范围、强化相关技术措施的规范使用、健全数据合规法律责任体系等一系列举措,建构出一套灵活且高效的医疗机构数据合规体系。

关 键 词：medical institution data privacy protection data security compliance governance 

分 类 号：D913[政治法律—民商法学]