我国网络直播平台数据合规监管的法律研究

Legal Research on Data Compliance Supervision for Online Live Streaming Platforms in China

摘要: 数据合规是数据安全治理的重要组成部分，目前已经上升到国家安全战略高度。但是我国网络直播行业数据违规现象频发。我国网络直播平台数据合规监管在行政监管和平台内部监管方面面临着诸多困境，行政监管方面存在多头监管现象严重等问题，平台内部监管面临着管理层合规意识薄弱等困境。解决我国网络直播平台数据违规问题，需要从以上两方面入手。行政监管方面，首先应完善直播平台数据合规相关法律法规；其次，明确监管主体，并充分发挥社会民众和新闻媒体的监督作用。此外，在适用过错推定责任的同时，应确立行政监管的边界和免责事由，并加大激励手段。最后，政府需建立健全事前、事中、事后的防控体系，以优化监管方式。平台内部监管路径的优化则需从培养企业合规文化、增强员工的数据合规意识、并利用区块链技术优化平台数据安全管理体系，力求实现“预警–应急处理–事后救济”的全过程覆盖。

Abstract: Data compliance is a crucial component of data security governance and has now ascended to a national security strategy level. However, data violations are frequent in China’s online live streaming industry. The challenges faced in the regulation of data compliance for online live streaming platforms in China include both administrative supervision and internal platform supervision. Administratively, there are severe issues with overlapping regulatory bodies. Internally, platforms struggle with weak compliance awareness among platform management. To address data violations on online live streaming platforms, solutions must be pursued on both administrative and internal platform regulatory fronts. Administratively, it is imperative to improve the legal and regulatory framework for data compliance on live streaming platforms. Additionally, regulatory responsibilities should be clearly defined and the role of public and media oversight should be maximized. Furthermore, while applying the presumption of fault liability, the boundaries of administrative regulation and grounds for exemption should be established, and incentives should be enhanced. Finally, the government needs to develop a comprehensive prevention and control system for pre-event, during-event, and post-event stages to optimize regulatory methods. For internal platform regulation, improvements should focus on cultivating a compliance culture within enterprises, enhancing data compliance awareness among internal employees, and leveraging blockchain technology to optimize the internal data security management system, aiming for full coverage of the “early warning-emergency response-post-event remedy” process.