數據安全認證：個人信息保護的第三方規制

Data Security Certification: Third- Party Regulation of Personal Information Protection

契合“放管服”改革理念的數據安全認證，在數字時代整個規制法體系中必將占據日益重要的地位。數據安全認證通過聲譽評價機制，可以引導、激勵互聯網企業守法合規經營，可以增强用戶對中小微互聯網企業和新興數字産業的信任感，可以避免“一刀切”的政府規制，可以滿足社會公眾多元的數據安全需求。數據安全認證機構應具有高度的獨立性與專業性，防止其被互聯網企業“俘獲”或成為政府的“附庸”。宜實行自願為主、强制為輔的數據安全認證模式。認證程序應强調公正透明性，認證標準應注重評價企業數據合規的制度建設。根據過錯責任原則，分別設置數據安全認證機構“相應的賠償責任”或“連帶責任”，並加大對數據安全認證違法行為的公法責任追究。科學構建法治化的數據安全認證體制機制，不僅是保障數據安全的現實需要，而且是彌補數字時代政府規制缺陷的迫切需求。

Data security certification that conforms to the reform concept of 'decentralization, management and service' will surely occupy an increasingly important position in the entire regulatory legal system in the digital age. Data security certification through the reputation evaluation mechanism can guide and encourage Internet companies to operate in compliance with laws and regulations, can enhance users' trust in small, medium and micro Internet companies and emerging digital industries, can avoid 'one size fits all' government regulations, and can meet the diverse needs of the public data security requirements. Data security certification agencies should have a high degree of independence and professionalism to prevent them from being 'captured' by internet companies or becoming 'vassals' of the government. It is advisable to implement a data security certification model with voluntary certification as the primary and compulsory certification as the supplement. The certification process should emphasize fairness and transparency, and certification standards should focus on the establishment of a system for evaluating corporate data compliance. According to the principle of fault liability, the data security certification body shall be set up 'corresponding compensation liability' or 'joint and several liability'. It is necessary to increase public law accountability for data security certification violations. The establishment of a legalized data security certification system is not only a need to ensure data security, but also an urgent need to make up for the deficiencies of government regulations in the age.