M2M時代下的資料保護權利之進展－歐盟與日本觀察

Development of Data Protection Rights in the Age of M2M-Observation on EU and Japan

徐彪豪

《科技法律透析》 25卷11期 (2013/11) Pp. 47-62

摘要

隨者聯網技術的發展，與個人手持智慧型裝置的普及，物與物之間的資料傳輸量正以前所未有的速度增長。其對個人資料保護的衝擊，自然不在話下。本文試圖檢視2012年1月歐盟執委會所公佈的「一般資料保護規章」（General Data Protection Regulation）草案與日本總務省和經濟產業省下各研究會與工作小組所發布的政策文件，以觀察各國政府如何因應此一趨勢。其中，歐盟草案提出了「特徵分析限制」的強化與「被遺忘權」的概念。而日本的政策文件也進一步探討終端裝置之ID、IP地址、與Cookie等資料是否應屬個人資料之範疇，並對個人資料之利用，提出未來發展的短、中期方向思考。此外，本文同時介紹日本各界對上述歐盟草案之回應，以期提供未來規劃類似法制政策之參考。

關鍵字

智慧聯網 ； 物聯網 ； 資料保護 ； 巨量資料 ； 被遺忘權 ； 特徵分析 ； 個人資料

並列摘要

With the advancement of internet and communications technologies, and the fast growing pervasiveness of personal internet devices such as tablets and smart phones, the volume of data transmission is increasing at an unprecedented speed. It is clear that these circumstances are relevant to the protection of personal data. This articles aims to observe how governments around the world are responding to the phenomenon; specifically the draft of the ＂General Data Protection Regulation＂ proposed by the European Commission on January 2012, and policy documents published by government agencies in Japan. Among those documents, the provision on the restriction of profiling for certain purposes and the concept of ’right to be forgotten’ are introduced in the proposed EU Regulation. In addition, the issue regarding whether the cookies and IP addresses and identifier in certain personal smart devices lie within the scope of personal data is further discussed in the Japanese policy papers. Last but not the least, responses from various Japanese institutions to the aforementioned EU regulation draft are also provided in the hope that a more comprehensive view can be offered as a reference for similar legal policy in the future.

並列關鍵字

Internet of Things ； M2M ； Data Protection ； Big Data ； the Right to Be Forgotten ； Profiling ； Personal Data

參考文獻

Donna Ferguson, How Supermarkets Get Your Data - And What They Do with It. THE GUARDIAN, Jun. 8, 2013, http://www.guardian.co.uk/money/2013/jun/08/supermarkets-get-your-data/print (last visited Oct. 25, 2013)

Mayer-Schönberger, Viktor、袁杰譯(2013)。刪除：大數據取捨之道。浙江人民出版社。

Mayer-Schönberger, Viktor、Cukier, Kenneth、林俊宏譯(2013)。大數據。天下遠見。

Commission Proposal for a Regulation of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), COM(2012) 11 final (Jan. 25, 2012), available at: http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=COM:2012:0011:FIN:EN:PDF (last visited Oct. 25, 2013)

Gilbert, Francoise(2012).European Data Protection 2.0: New Compliance Requirement in Sight - What the Proposed EU Data Protection Means for U.S. Companies.Santa Clara Computer & High Tech. L.J..28(4),815-817+847.