- 期刊
- OpenAccess
英國脫歐與歐盟GDPR適用議題－從網路主權角度的分析
Brexit, EU GDPR, and Adequacy: Implications for Cyber Sovereignty
摘要
網路數位科技在資訊社會全方面的推進，使得數據（data）本身已經成為國家的重要資源。在這個脈絡下，數據保護（data protection）、數據流通／移轉（dataflow/transfer）以及數據在地化（data localization）等議題已不再局限於隱私權與人權的範疇，更牽涉國家政府對此之相關治理規範，因而對網路主權（cyber sovereignty）的理論與實踐有所啟發。網路主權在本文指涉國家管理權利適用於網路空間。本文以英國為案例，探討其自2016年以降從「歐盟的英國」到「全球的英國」脫歐（Brexit）進行式的過程中制定個資保護相關法律的應對措施。鑒於脫歐後英國社會仍然將與歐盟地區交流密切，英國將歐盟《一般資料保護規範》（GDPR）國內法化，同時並制定《2018資料保護法》（Data Protection Act 2018）以及《2019資料保護、隱私與電子通訊細則》（Data Protection, Privacy and Electronic Communications（Amendments etc）（EU Exit）Regulations 2019）等法律予以補充，在精神上希望持續與歐盟維持一致。本文認為，這些行為既確立了英國國家的主導性，也一定程度體現了國家主權在網路空間實踐上的妥協。
並列摘要
Coupled with the evolvement of cyber and digital technologies in information society, data has become an important resource in a state. Under this context, issues such as data protection, data flow/transfer as well as data localization are not only involved in the area of privacy and human rights, but also in the area of state's governance. Hence, there are theoretical and practical implications for cyber sovereignty. In this article cyber sovereignty is referred to as a concept that state's governance rights can be applied in cyber space. Taking the Brexit as an example, this article analyzes its measurements relevant to data protection taken along with the adaption from ＂European UK＂ to ＂Global UK.＂ Foreseeing the close communication and interaction between the UK and EU after the Brexit, the UK has domesticized the EU GDPR, enacted Data Protection Act 2018, and Data Protection, Privacy and Electronic Communications (Amendments etc.), in a sense aligning to the EU laws. This article acknowledges that these commitments, for one thing ensure the dominance of the UK as a sovereign state; for another reflect on the state's compromise regarding cyber space in reality.