“三权分置”制度框架下企业数据保护及合规治理研究

Research on Enterprise Data Protection and Compliance Governance under the Framework of the “Three Rights Separation” System

摘要: 数据作为一种新的生产要素，对企业经营的重要性日益凸显。“数据二十条”为了更好地应对数据在生产、流通、交易的过程中呈现出的主体多，利益诉求复杂等特点，突破了传统的权利制度框架，将重点放在数据使用权的流通，提出数据资源持有权、数据加工使用权和数据产品经营权“三权分置”的数据产权制度框架。该规定的实施，为企业数据资源的所有者、使用者处理数据的合规性、可行性奠定了坚实的法律基础。在此基础上，突破以往传统的保护途径，参照“三权分置”的运行机制，探索对企业数据的保护，建立健全相关制度，完善企业数据合规治理体系，实现数据要素价值。

Abstract: As a new factor of production, data is increasingly important for business operations. In order to better respond to the characteristics of multiple subjects and complex interest demands presented by data in the production, circulation, and transaction processes, the “Twenty Articles of Data” breaks through the traditional framework of rights system and focuses on the circulation of data usage rights. It proposes a data property rights system framework of “three rights separation” of data resource ownership, data processing and usage rights, and data product management rights. The implementation of this regulation has laid a solid legal foundation for the compliance and feasibility of data processing by owners and users of enterprise data resources. On this basis, breaking through traditional protection charnels and referring to the operating mechanism of “three rights separation”, we will explore the protection of enterprise data, establish ant improve relevant systems, improve the compliance governance system of enterprise data, and realize the value of data elements.