个人信息保护影响评估制度的困境与反思

The Dilemma and Reflection of Personal Information Protection Impact Assessment System

摘要: 个人信息保护影响评估制度是一种事前合规检验，在当前大数据时代，对于制约个人信息处理者的行为，保护信息主体的个人信息安全具有关键性作用。当前，我国的个人信息保护影响评估制度的有关法律规定不够完善、适用范围过于广泛、缺乏中立的监管等，这些问题可能会影响评估的公正性。为了更好发挥制度功能，切实维护个人信息安全，需要有针对性的进行完善，包括建立“三方评估体系”、设定科学合理的执行程序等，只有及时有效的完善该制度，才能确保影响评估的公正客观，预防个人信息安全遭到侵害。

Abstract: Personal information protection impact assessment system is a prior compliance inspection. In the current era of big data, it plays a key role in restricting the behavior of personal information processors and protecting the personal information security of information subjects. At present, the relevant legal provisions of the personal information protection impact assessment system in China are not perfect, the scope of application is too wide, and the lack of neutral supervision may affect the fairness of the assessment. In order to better play the function of the system and effectively maintain the security of personal information, it is necessary to make targeted improvements, including the establishment of a “tripartite assessment system” and the setting of scientific and reasonable implementation procedures. Only by timely and effective improvement of the system can we ensure the fairness and objectivity of the impact assessment and prevent the infringement of personal information security.