企業蒐用消費者資料之個資保護法制思維——美國加州消費者隱私法之借鏡

Designing a Legal Regime for Personal Data Protection in the Course of Businesses’Process of Collecting Consumers’Data: Learning from the California Consumer Privacy Act

美國加州消費者隱私法（CCPA）是美國第一部不區分資料屬性的全面性消費者隱私保護立法。本文進行CCPA與歐盟一般性資料保護規則（GDPR）之差異比較論述，指出CCPA與GDPR對於消費者個資保護（或資訊隱私保護）法制的不同思維，並提出本文觀察兩種不同思維的可能成因。本文說明CCPA所提供之消費者隱私保護的啟示與反思，審慎考量CCPA作為兼顧資訊科技發展與消費者資訊隱私保護平衡之可行性。

The California Consumer Privacy Act (CCPA) is the first comprehensive privacy law in the United States. CCPA adopts a far-reaching approach in regulating privacy issues rather than limiting specific industries or sectors. This thesis provides a comparative study on the CCPA and the General Data Protection Regulation in the European Union (GDPR) as to illustrate different approaches adopted in these two laws and the likely rationale of the respective approaches. One of the key areas of the analysis is to identify certain features in the CCPA that provides good examples of balancing technological innovation and consumer privacy protection.