题名

5G與消費者保障：以維護消費者資訊自主權為中心

并列篇名

5G and Consumer Protection: A Perspective of Preservation of Consumers' Informational Self-Determination

作者

葉志良(Chih-Liang Yeh)；程致剛(Chih-Kang Cheng)；楊東穎(Dong-Ying Yang)

关键词

歐盟個資保護規則 ； 個人資料保護法 ； 個資跨境傳輸 ； 資料在地化 ； 資料可攜權 ； EU General Data Protection Regulation ； Personal Data Protection Act ； Cross-Border Data Flow ； Data Localization ； Right to Data Portability

期刊名称

台灣國際法學刊

卷期/出版年月

16卷1期（2020 / 03 / 01）

页次

23 - 51

内容语文

繁體中文
中文摘要

未來因應5G發展而生的新興產業，將是以「資料」為中心的產業，而資料的應用是資通訊科技與商業模式得以立足與發展的起點；然而，目前數位經濟發展大多建立在使用者個資及其行為模式的分析上，引發使用者對於數位服務平臺的顧慮。因此，如何調和個人資料保護與數位經濟發展之間的價值，是今日亟待解決的課題。基於科技發展經常影響法律變動方向，且法律制定或變動亦深刻影響社會發展，本文嘗試透過對資料自由流通概念的分析，包括個資跨境傳輸、資料在地化與資料可攜權的具體內涵，認為資料自由流通對於現今經濟發展格外重要，為使資料主體更能掌握與自身有關的資訊，資料可攜權將能促成此目的之達成，並可形塑出未來的資料產業。
英文摘要

The emerging industries developed from 5G services in the future will be data-centric industries. The data application is the starting point for all info-communication technologies and business models. However, current development of digital economy establishes on the analyses of user's personal information and behavior patterns, which causes users' concern on digital service platforms. Thus, how to harmonize the values between data protection and development of digital economy is a crucial issue to be solved. Based on the premise that development of technology affects the direction of legal changes and the enactment of changes of law also affects the development of society, this research attempts to discover the concept and meaning of free flow of data, including the cross-border data flow, data localization and the right to data portability. This paper argues that free flow of data is significant to current economic development. To enable the data subject to control over his/ her personal information, the right to data portability can achieve the goal and create the data industry in the future.
主题分类 社會科學 > 法律學
参考文献
  1. 王清安,黃基禎(2019)。中共對網路空間主權之概念與作為。中國大陸研究，62(1)，67-100。
    連結：
  2. 江耀國,黃子宴(2019)。個人資料的概念與匿名化：一個認識論的觀點。東海大學法學研究，58，57-58。
    連結：
  3. 孫鈺婷(2016)。歐美跨境資料傳輸新框架從歐美安全港協議無效談起。科技法律透析，28(7)，22-30。
    連結：
  4. 翁清坤(2018)。賦予當事人個人資料財產權地位之優勢與侷限：以美國法為中心。台大法學論叢，47(3)，941-1051。
    連結：
  5. 張乃文(2010)。雲端運算產業發展之策略與法制因應。科技法律透析，22(12)，23-40。
    連結：
  6. 郭戎晉(2015)。個人資料跨境傳輸之法律研究。科技法律透析，27(8)，31-51。
    連結：
  7. 陳志宏(2017)。網路無國界，跨境個資傳輸如何管—以APEC CBPRs 為例。科技法律透析，29(8)，30。
    連結：
  8. 劉定基(2014)。雲端運算與個人資料保謢以台灣個人資料保護法與歐盟個人資料保護指令的比較為中心。東海大學法學研究，43，53-106。
    連結：
  9. 樓一琳,何之行(2017)。個人資料保護於雲端運算時代之法律爭議初探暨比較法分析：以健保資料為例。台大法學論叢，46(2)，339-422。
    連結：
  10. 國發會推動個資法修法，力拼GDPR 適足性認定，2019 年12 月29 日，https://www.ndc.gov.tw/News_Content.aspx?n=114AAE178CD95D4C&s=632E56DC2B36CB76 （最後點閱日期：2020 年3 月13 日）。
  11. 大法官會議釋字第603 號解釋
  12. ,財團法人電信技術中心。
  13. Data Portability, Wikipedia, https://en.wikipedia.org/wiki/Data_portability (last visited March 13, 2020).
  14. Data Portability, Techopedia (2013/06/28), https://www.techopedia.com/definition/6752/data-portability (last visited March 13, 2020).
  15. About the California Consumer Privacy Act, Californians for Consumer Privacy, https://www.caprivacy.org/about (last visited March 13, 2020).
  16. Regulation (EU) 2018/1807 of the European Parliament and of the Council of 14 November 2018 on a framework for the free flow of non-personal data in the European Union. [2018] OJ L 303.
  17. Regulation 2016/679 of the European Parliament and of the Council on the Protection of Natural Personal with Regard to the Processing of Personal Data and on the Free Advancement of Such Data, and repealing Directive 95/46/EC, 2016 O.J. L. 119/1 [hereinafter GDPR].
  18. 啟動5G 應用發展， 實現2020 智慧生活， 行政院新聞稿，2019 年6 月13 日，https://www.ey.gov.tw/Page/448DE008087A1971/10e078d9-650b-41d6-95a8-6bb0e639567d（最後點閱日期：2020 年3 月13 日）。
  19. Albright Stonebridge Group, Data Localization: A Challenge to Global Commerce and the Free Flow of Information 3, 5, 7, 14 (2015), https://www.albrightstonebridge.com/news/data-localization-challenge-globalcommerce-and-free-flow-information (last visited March 13, 2020).
  20. Article 29 Working Party(2018).Article 29 Working Party, Guidelines on Article 49 of Regulation 2016/679, WP 261, 18/EN, adopted on 6 February 2018..
  21. Rob Bratby, Singapore takes business-friendly approach in data protection guidelines, ZDNet (2013/09/30), https://www.zdnet.com/article/singapore-takes-business-friendly-approach-in-data-protection-guidelines/ (last visited March 13, 2020).
  22. Fred H. Cate, Peter Cullen & Viktor Mayer-Schönberger, Data Protection Principles for the 21st Century: Revising the 1980 OECD Guidelines 16 (2014), https://www.oii.ox.ac.uk/archive/downloads/publications/Data_Protection_Principles_for_the_21st_Century.pdf (last visited March 13, 2020).
  23. Nigel Cory, Cross Border Data Flows: Where are the Barriers, and What Do They Cost? Information Technology & Innovation Foundation (2017), http://www2.itif.org/2017-cross-border-dataflows.pdf (last visited March 13, 2020).
  24. Cory, Nigel,Atkinson, Robert D.,Castro, Daniel(2019).,ITIF.
  25. Court of Justice of the European Union, Maximillian Schrems v. Data Protection Commissioner, Case C-362/14 (2015), https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62014CJ0362 (last visited March 13, 2020).
  26. De Hert, Paul,Papakonstantinou, Vagelis,Malgieri, Gianclaudio,Beslay, Laurent,Sanchez, Ignacio(2018).The Right to Data Portability in the GDPR: Towards User-Centric Interoperability of Digital Services.Comput. L. & Sec. Rev,34,193.
  27. Stéphanie De Smedt, Free Flow of non-Personal Data and GDPR, Lexology (2019/06/19), https://www.lexology.com/library/detail.aspx?g=240c3d71-f818-4233-a7f3-01b32f17b3b3 (last visited March 13, 2020).
  28. Diaz, Efren Diaz(2016).The New European Union General Regulation on Data Protection and the Legal Consequences for Institutions.Church, Communication and Culture,1,206.
  29. Egan, Erin(2019).,未出版
  30. Engels, Barbara(2016).Data Portability among Online Platforms.Internet Pol＇y Rev,5,1.
  31. Engels, Barbara(2016).Data Portability among Online Platforms.Internet Pol'y Rev.,5,1-4.
  32. European Commission(2016).European Commission, European free flow of data initiative within the Digital Single Market 2 (2016)..
  33. European Commission(2019).European Commission, Communication from the Commission to the European Parliament and the Council Guidance on the Regulation on a framework for the free flow of non-personal data in the European Union, COM(2019)250 final ["Guidance"]..
  34. European Commission, DSM Cloud Stakeholder Working Groups on Cloud Switching and Cloud Security Certification, https://ec.europa.eu/digital-single-market/en/dsm-cloud-stakeholder-working-groups-cloudswitching-and-cloud-security-certification.
  35. European Commission, Free Flow of non-personal data – Digital Single Market, https://ec.europa.eu/digitalsingle-market/en/free-flow-non-personal-data (last visited March 13, 2020).
  36. European Commission, A Framework for the Free Flow of Non-personal Data in the EU, Fact Sheet (2018/06/21), https://ec.europa.eu/commission/presscorner/detail/en/MEMO_18_4249 (last visited March 13, 2020).
  37. Fuster, Gloria González(2014).The Emergence of Personal Data Protection as a Fundamental Right of the EU.
  38. Government Technology Agency, 5 National Projects For 1 Smart Nation (2018/8/7), https://www.tech.gov.sg/media/technews/5-national-projects-for-1-smart-nation (last visited March 13, 2020).
  39. Graef, Husovec,Husovec, Martin,Purtova, Nadezhda(2018).Data Portability and Data Control: Lessons for an Emerging Concept in EU Law.German L. J.,19,1359.
  40. Graef, Inge,Husovec, Martin,Purtova, Nadezhda(2018).Data Portability and Data Control: Lessons for an Emerging Concept in EU Law.German L. J.,19,1359-1365.
  41. Graef, Inge,Verschakelen, Jeroen,Valcke, Peggy(2013).Putting the Right to Data Portability into a Competition Law Perspective.Law: The Journal of the Higher School of Economics, Annual Review,53.
  42. Ho et al, IMDA and PDPC launch Trusted Data Sharing Framework for trusted data sharing between organisations, Allen & Gledhill (2019/07/30), https://www.allenandgledhill.com/media/6974/ag-imda-and-pdpc-launch-trusted-datasharing-framework.pdf (last visited March 13, 2020).
  43. Hon, W Kuan(2017).Data Localization Laws and Policy: The EU Data Protection International Transfers Restriction Through a Cloud Computing Lens.
  44. IDC, European Data Market SMART 2013/0063 Final Report 28 (2017), https://www.key4biz.it/wp-content/uploads/2018/04/SMART20130063_Final-Report_030417_2.pdf (last visited March 13, 2020).
  45. Masumi Koizumi, Japan's Pitch for Free Data Flows 'With Trust' Faces Uphill Battle at G20 amid 'Splinternet' Fears, JapanTimes (2019/6/27), https://www.japantimes.co.jp/news/2019/06/27/business/tech/japans-pitch-free-data-flows-trust-faces-uphill-battle-g20-amid-splinternet-fears/#.Xq7uDs1S_IU (last visited May 3, 2020)
  46. Shawn Lim, Singapore to add data sharing requirement to Personal Data Protection Act, The Drum (2019/02/26), https://www.thedrum.com/news/2019/02/26/singapore-add-data-sharing-requirement-personaldata-protection-act (last visited March 13, 2020).
  47. Janice Lin, New framework and blockchainpowered platform will enable the safe and secure sharing of data, which can help propel AI and beyond, IMDA (2018/5/14), https://www.imda.gov.sg/news-and-events/impact-news/2018/05/in-data-we-trust (last visited March 13, 2020).
  48. Gabe Maldoff, Top 10 Operational Impacts of the GDPR: Part 6 – RTBF and Data Portability, IAPP (2016/01/25), https://iapp.org/news/a/top-10-operational-impacts-of-the-gdpr-part-6-rtbf-and-data-portability/(last visited March 13, 2020).
  49. Eric Null & Ross Schulman, The Data Portability Act: More User Control, More Competition (2019), https://bit.ly/2F53jkE
  50. OECD(2014).,未出版
  51. Nicole Perrin, Facebook-Google Duopoly Won't Crack This Year, eMarketer (2019/11/04), https://www.emarketer.com/content/facebook-google-duopoly-won-t-crack-this-year (last visited March 13, 2020).
  52. Personal Data Protection Commission, Keynote Speech by Mr. Tan Kiat How, Commissioner of PDPC, at the IAPP Asia Privacy Forum, 15 July 2019 at Sands Expo and Convention Centre, Marina Bay Sands, PDPC (2019/07/15), https://www.pdpc.gov.sg/news/press-room/2019/07/keynote-speech-by-commissioner-of-pdpcat-the-iapp-asia-privacy-forum-2019 (last visited March 13, 2020).
  53. Personal Data Protection Commission, New Guide to Data Sharing, PDPC (2017/07/27), https:// ww.pdpc.gov.sg/News/Latest-Updates/2017/07/New-Guide-To-Data-Sharing (last visited March 13, 2020).
  54. Personal Data Protection Commission, Guide to Accountability Under the Personal Data Protection Act (2019/7/15), https://www.pdpc.gov.sg/-/media/Files/PDPC/PDF-Files/Other-Guides/Guide-to-Accountability.pdf (last visited March 13, 2020).
  55. Felix Richter, GAFAM Market Cap Jumps $2.7 Trillion Over Past Five Years, statista (2019/05/03), https://www.statista.com/chart/17875/market-capitalization-of-selected-tech-companies/ (last visited March 13, 2020).
  56. Schwartz, Paul M.,Solove, Daniel J.(2011).The PII Problem: Privacy and a New Concept of Personally Identifiable Information.N.Y.U.L. Rev.,86,1814-1868.
  57. Smart Nation and Digital Government Office, Data Innovation Programme Office (DIPO), https://bit.ly/2SMCyJJ
  58. Smart National Singapore, Strategic National Projects, https://www.smartnation.sg/what-is-smart-nation/initiatives/Strategic-National-Projects (last visited March 13, 2020).
  59. Somaini, Laura(2018).The Right to Data Portability and User Control: Ambitions and Limitations.Media Laws,3
  60. Emily Taylor, Data Protection Day-Data Portability and the GDPR, Internet Governance Law and Technology Search (2016/02/09), https://oxil.uk/blog/data-protection-day-data-portability-gdpr/ (last visited March 13, 2020).
  61. UNCATD(2016).,未出版
  62. Urquhart, Lachlan,Sailaja, Neelima,McAuley, Derek(2018).Realising the Right to Data Portability for the Domestic Internet of Things.Pers & Ubiquit. Comput.,22,317-322.
  63. US International Trade Commission(2019).,未出版
  64. Van der Auwermeulen, Barbara(2017).How to Attribute the Right to Data Portability in Europe: A Comparative Analysis of Legislations.Comput. L. & Sec. Rev.,33,57-58.
  65. Van der Auwermeulen, Barbara(2017).How to Attribute the Right to Data Portability in Europe: A Comparative Analysis of Legislations.Comput. L. & Sec. Rev,33,57.
  66. Wong, Janis,Henderson, Tristan(2019).The Right to Data Portability in Practice: Exploring the Implications of the Technologically Neutral GDPR.Int＇ l Data Privacy L.,9,173.
  67. Zanfir, abriela(2012).The Right to Data Portability in the Context of the EU Data Protection Reform.Int'l Data Privacy L.,2,152-161.
  68. Zanfir, Gabriela(2012).The Right to Data Portability in the Context of the EU Data Protection Reform.Int＇l Data Privacy L.,2,149.
  69. 王宏仁，自己的個資自己賣，新MyData 模式讓民眾決定誰有權用個資，iThome (2019/6/13), https://www.ithome.com.tw/news/131167（最後點閱日期：2020 年5 月3 日）。
  70. 布魯斯施奈爾, Bruce,韓沁林（譯）(2016).隱形帝國：誰控制大數據,誰就控制你的世界.
  71. 安德雷斯• 韋思岸, Andreas,胡小銳（譯）,李凱平（譯）(2016).大數據與我們：如何更好地從後隱私經濟中獲益？.
  72. 克里斯多夫• 拉貝, Christopher,翁德明（譯）(2018).裸人：數位新獨裁的世紀密謀,你選擇自甘為奴,還是突圍而出？.
  73. 李治安(2010)。當法律漫步在雲端。法學新論，25，54-55。
  74. 沈勤譽，4G 改變生活、5G 改變社會！ 5G 落地應用的五種場景，未來商務，2019 年8 月30 日，https://fc.bnext.com.tw/5g-5-scences-applied-to-daily-life/（最後點閱日期：2020 年3 月13 日）。
  75. 周晨蕙編譯，日本資訊信託功能認定指引第二版，資策會科法所（2020/3），https://stli.iii.org.tw/article-detail.aspx?no=67&tp=5&d=8422（ 最後點閱日期：2020 年5月3 日）。
  76. 周晨蕙編譯，日本公布資料信託功能認定指引ver1.0 並進行相關實驗，資策會科法所（2018/10），https://stli.iii.org.tw/article-detail.aspx?no=64&tp=1&d=8115 （最後點閱日期：2020 年5 月3 日）。
  77. 法蘭克林• 富爾, Franklin,吳緯疆（譯）(2019).被壟斷的心智：谷歌、亞馬遜、臉書、蘋果如何支配我們的生活.
  78. 胡林(2018)。資料在地化衝擊全球創新力。能力雜誌，747，17-18。
  79. 范姜真媺(2016)。網路時代個人資料保護之強化—被遺忘權利之主張。興大法學，19，61-106。
  80. 張志偉(2017)。記憶或遺忘，抑或相忘於網路—從歐洲法院被遺忘權判決，檢視資訊時代下的個人資料保護。政大法學評論，148，1-68。
  81. 陳志民(2018)。大數據與市場力濫用行為初探。公平交易季刊，26(3)，1-33。
  82. 陳榮傳(2001)。再論資料跨國流通。月旦法學雜誌，78，166。
  83. 曾更瑩(2018)。GDPR 與數位經濟─歐盟的企圖與啟發。台灣經濟論衡，16(3)，54-56+58-64+67-68。
  84. 黃晶琳，5G 首波卡位戰停了總標金達1,380 億元，經濟日報，2020 年1 月16 日，https://money.udn.com/money/story/5648/4290733（最後點閱日期：2020 年3 月13 日）。
  85. 葉志良(2019)。5G時代的產業轉型與監理翻轉。5G時代誰與爭鋒研討會
  86. 葉志良，正向發展5G 的根本之道，經濟日報，2019 年8 月16 日，https://udn.com/news/story/7240/3991859（最後點閱日期：2020 年3 月13 日）。
  87. 葉奕緯(2018)。5G 來了！你不可不知的技術趨勢與標準。零組件雜誌，317，40-43。
  88. 漢娜• 弗萊, Hannah,林志懋（譯）(2019).打開演算法黑箱：反噬的AI、走鐘的運算,當演算法出了錯,人類還能控制它嗎？.
  89. 劉定基(2017)。大數據與物聯網時代的個人資料自主權。憲政時代季刊，42(3)，275-278+284-285+288-291+298。
  90. 劉靜怡(2019)。淺談GDPR 的國際衝擊及其可能因應之道。月旦法學雜誌，286，5-31。
  91. 蔡志宏(2019)。蔡志宏，台灣5G 行動計畫方向，台灣通訊學會第六屆第二次會員大會，2019 年5 月21 日。
  92. 蔡柏毅，歐盟「個人資料保護規則」導讀，國發會網站歐盟一般資料保護規則專區，頁7-10，https://www.ndc.gov.tw/Content_List.aspx?n=F417F294CBF7FFF3。
  93. 蔡朝安，取證於雲端—司法權與隱私權的界限，2018 年7 月，https://www.igf.org.tw/wp-content/uploads/2018/08/ 蔡朝安.pdf（最後點閱日期：2020 年3 月13 日）。
  94. 蕭郁溏(2018)。以比較法觀點規範網路服務提供者於防制性隱私內容外流之責任與義務。政大法學評論，154，151-237。
  95. 戴瑞瑤，國發會拼GDPR「明年研修個資法」，聯合新聞網，2019 年12 月25 日，https://udn.com/news/story/11316/4246848（最後點閱日期：2020 年3 月13 日）。
  96. 羅鈺珊(2018)。數據經濟下共融成長的挑戰：大數據的兩面刃。經濟前瞻，178，88。
  97. 蘇慧婕(2016)。歐盟被遺忘權的概念發展—以歐盟法院Google Spain v. AEPD 判決分析為中心。憲政時代，41(4)，473-516。
被引用次数
  1. 程法彰(2022)。競爭秩序下的消費者保護在數位經濟的大數據時代中個人資料保護的角色。高大法學論叢，18(1)，129-173。
print cancel