數位時代下電子商務之個資保護實踐──以日本隱私治理為借鑑

The Practice of Personal Data Protection in the Era of Digital E-Commerce - Taking Inspiration from Privacy Governance in Japan

近年全球受到新冠肺炎疫情影響，民眾消費習慣改變，更加速電子商務的蓬勃發展。企業透過物聯網、雲端科技、人工智慧等新興科技創新商業模式，運用大數據分析市場趨勢以洞燭商機，卻可能產生許多隱私風險。隨著國際對於隱私保護意識抬頭，如何有效運用資料，成為電商在數位時代下實踐個資保護之挑戰。有鑒於此，日本經濟產業省與總務省於2023年4月聯合發布《數位轉型時代企業隱私治理指南第1.3版》，提供企業擬訂經營策略與支援方案，協助企業在推展業務上有適當準則以運用個人資料，從而促進產業應用並兼顧隱私保護。我國數位發展部於2022年11月預告訂定《數位發展部指定數位經濟相關產業類非公務機關個人資料檔案安全維護管理辦法》，擴大適用範圍及賦予業者更積極的個資管理義務，以提升電商產業個資保護水準。由於隱私觀念會隨著時代變遷，企業除了被動地遵循法規外，更應主動建構一套完善的隱私治理體制，指派隱私保護負責人與設立隱私保護組織，並積極地向消費者與各利害關係人溝通，方能獲得社會信賴以提升企業價值。

In recent years, the world has been affected by the COVID-19epidemic, and the change of Consumption habits of the public have accelerated the booming development of e-commerce. Companies are innovating their business models through emerging technologies such as the Internet of Things, cloud technology, and artificial intelligence, using big data to analyze market trends and identify business opportunities; however, many privacy risks may arise. With the rise of international awareness of privacy protection, the effective use of data has become a challenge for e-commerce to practice personal data protection in the digital age. In view of this, in April 2023, the Ministry of Economy, Trade and Industry (METI) and the Ministry of Internal Affairs and Communications (MIC) jointly released the ''The Guidebook for Corporate Privacy Governance in the Digital Transformation (DX) Era Ver 1.3'' to provide companies with business strategies and support programs to help them develop appropriate guidelines for the use of personal data in business development, thereby promoting industrial applications and protecting privacy. In November 2022, the Ministry of Digital Affairs (moda) announced the enactment of the ''Regulations on the Security and Maintenance of Personal Data Files of Non-public Institutions in Digital Economy-related Industries Designated by the Ministry of Digital Development,'' which expands the scope of application and imposes more active personal data management obligations on the e-commerce industry to enhance the level of personal data protection. Since the concept of privacy will change with the times, enterprises should not only passively follow the laws and regulations, but also actively build a perfect privacy governance system, including assigning a person in charge of privacy protection, establishing a privacy protection organization, and actively communicating with consumers and stakeholders in order to gain the trust of the society and to enhance corporate value.