大數據時代下個人資料範圍之再檢討－—以日本為借鏡

Reexamination the scope of Personal Data in the Big Data era—Learn from Japan

近年因資訊通信技術(ICT)快速進步，資料記憶裝置巨量化、廉價化，人們運用自各處電子端末裝置或機器，如個人電腦、智慧型手機，監視攝影機等，大量蒐集個人行動履歷、網路上閱覽記錄、位置資料(GPS)、健康狀態等資料，並利用Hadoop.R 語言等開放源碼之軟體程式，將龐大數量資料分散於複數之伺服器或雲端，依大數據運算作快速之分析、處理，再將其結果活用在創新產業或有效率之行銷、提供新服務等。而各國政府亦高度重視大數據之利用價值，期待能活用以進行有效率之行政管理或預防災害，或做為擬定國家發展政策時之參據，以提升國家之競爭力等。但，如此蒐集所得大數據資料群中，往往包含大量有價值之各種個人資料（下稱個資），如生活履歷(life log)資料及健康保險等醫療紀錄等，其被濫用、洩漏之風險相對提高，若未能建立法制確實規範將對個人隱私等權益造成重大威脅。故如何讓個資在當事人權利、利益不受損害之安全狀態下，又能被活用以符合國家及產業之需求，為個資法面臨之重要議題，亦為日本自2013 年研議年餘後完成修法之重要目標。本文即以日本修正之個資法，針對個資區分類型、加入匿名加工資料等，為發展大數據之運用架構健全之法律基盤，作介紹及分析。

Reexamination the scope of Personal Data in the Big Data era—Learn from Japan Personalinformation, considering it should be carefully handled under the vision of respecting thepersonality of an individual, shall be made subject to proper handling. But base on the Bigdata operation recently, people can collect, practical use, and analysis a large amount ofpersonal data quickly. The results are used in medical search, marketing, or formulategovernment policies. Because it will pose a threat to personal privacy, because they are oftenthe second use of personal data, the Individual can’t foresee the matter. Not only make theIndividual feel uneasy, so that individuals may suffer the loss of rights and interests also.How to make sure that Individuals are in control of their personal data, on the otherhand, by operation of the big data, personal data can be utilized in industrial innovation,medical advance, or the development of national polices. That is the most important issueabout Personal Data Protection Act in recent year, It’s also an important motivation for Japanto amend Act on the Protection of Personal Information in 2015.This article is based on the Japanese Act on the Protection of Personal Information in2015, to describe and analysis individual identification code , that Is a new type of personaldate as id-card number etc, is recognized as a Personal data to protected by law. Andintroduced the Anonymously processed information of anonymous data, explain its processingmethods, and the legal obligations which personal information handling business operatorshould comply with. The final review Personal Data Protection Act of our country, pointingout the inadequacies of the regulations, and the suggestion when amending the law.