《网络数据安全管理条例》下的个人信息可携带权制度  

The Personal Data Portability Right under the Regulations on the Management of Network Data Security in China

作　　者：刘云 Liu Yun(Tsinghua University,School of Law,Beijing,100084)

机构地区：[1]清华大学法学院,北京100084

出　　处：《工业信息安全》2025年第1期25-30,共6页Industry Information Security

基　　金：2024年度国家社科基金项目“数据产权合理使用制度构建研究”(项目号:24CFX069)。

摘　　要：《网络数据安全管理条例》第二十五条在《中华人民共和国个人信息保护法》第四十五条第3款的基础上推动了个人信息可携带权规则的细化,有利于促进数据要素形式的创新应用。该规则在适用范围上,包括个人原创性数据和个人推测性数据,但是不包括衍生数据。在主体条件上,可以划分为纯粹的本人行权模式、纯粹的代理行权模式,但是重点是要推动本人+代理人共同参与的协同行权模式。在行权限制方面,需要审慎地认定对他人权利的侵犯范围,同时将超出合理限度的收费限定在个案加工成本范围之内。可携带权的落地还有很长的道路要走,特别是企业主动参与配合的认识观和行业提供的实践工具还需要不断优化,但是该制度在全面数字化转型、万物互联互通的未来社会中将日益呈现出重大的应用价值。Article 25 of the"Regulations on the Management of Network Data Security"further elaborates on the rules of the data portability right based on Paragraph 3 of Article 45 of the"Personal Information Protection Law,"facilitating innovative applications of data elements in various forms.In terms of scope,it encompasses both personally created data and personally inferred data,but excludes derived data.Regarding the conditions for subjects,it can be categorized into purely individual exercise mode and purely agent exercise mode,with an emphasis on promoting a collaborative exercise mode involving both the individual and the agent.In terms of limitations on the exercise of rights,it is necessary to carefully determine the scope of infringement on the rights of others and limit charges beyond reasonable limits to the cost of individual case processing.The implementation of portability rights still has a long way to go,particularly in terms of enhancing enterprises'proactive participation and cooperation mindset,as well as the continuous optimization of practical tools provided by the industry.However,this system is poised to demonstrate significant application value in the future society characterized by comprehensive digital transformation and the interconnection of everything.

关 键 词：数据可携带权 欧洲通用个人数据保护条例 技术标准 数据经纪人 

分 类 号：D92[政治法律—法学]