從歐洲法院實務看資料保護在智慧聯網時代下發展－以資料保存指令無效案和西班牙Google案為例

Revisit of Data Protection in the Era of IoT Based On CJEU Jurisprudence-Inspiration from Annulment of Data Retention Directive and Ruling on Google Spain Case

徐彪豪

《科技法律透析》 26卷8期 (2014/08) Pp. 50-70

摘要

在智慧聯網的時代，資料透過諸如手機、平板等各式聯網裝置迅速累積，不僅改變人們的生活，對許多既有的管制架構也帶來衝擊。2014年的4月和5月，歐洲法院公布了兩項對資料保護有甚大影響的兩項判決，其中一項宣布2006年的資料保存指令無效，另一項則確立了搜尋引擎的營運者就個人資料保護應盡的義務。本文嘗試梳理這兩項判決，以期作為我國未來相關政策推動或法院未來判決方向之參考。

關鍵字

智慧聯網 ； 資料保護 ； 資料保存 ； 個人資料 ； 歐盟 ； 資料保存指令 ； 個人資料保護指令 ； 人肉搜索 ； 谷歌

並列摘要

In the era of Internet of Things, data is accumulated at an unprecedented speed through connected devices such as mobile phones and tablets. Not only have lives of people changed due to this phenomenon, so are impacts brought upon various regulatory frameworks. In April and May, 2014, the Court of Justice of European Union announced two rulings that have tremendous implications on data protection. One of them annulled the 2006 Data Retention Directive (Directive 2006/24/EC), and the other spelt out the obligation of an operator of search engine services in the respect of data protection. This article aims for providing reference for related policy-making and perhaps as well as rulings of local courts in the future by introduction of the abovementioned two rulings.

並列關鍵字

Internet of Things ； data protection ； data retention, personal data ； EU ； Data Retention Directive

參考文獻

Andrienko, Gennady,Gkoulalas-Divanis, Aris,Gruteser, Marco,Kopp, Christine,Liebig, Thomas,Rechert, Klaus(2013).Report from Dagstuhl: The Liberation of Mobile Location Data and its Implications for Privacy Research.MOBILE COMPUTING AND COMMUNICATIONS REVIEW.7(2),7.

Vermesan, Ovidiu(ed.)(2013).INTERNET OF THINGS -CONVERGING TECHNOLOGIES FOR SMART ENVIRONMENTS AND INTEGRATED ECOSYSTEMS.

徐彪豪(2013)。M2M 時代下的資料保護權利之進展－歐盟與日本觀察。科技法律透析。25(11)，47-62。

Commission Proposal for a Regulation of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), COM(2012) 11 final (Jan. 25, 2012), available at: http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=COM:2012:0011:FIN:EN:PDF (last visited Jun. 10, 2013)

Bignami, Francesca(2007).Privacy and Law Enforcement in the European Union: The Data Retention Directive.CHI. J. INT'L L.8,233-235+238.