[目的/意义] 从理论上总结分析国外个人数据保护官的含义、类型、职责与能力素质要求，为我国实践领域的应用提供学术上的分析和建议。[方法/过程] 通过文献回溯检索考查个人数据保护官的起源和含义；参考领英平台个人数据保护官招聘公告以及美国O*NET系统相关职业的规范模型，以KSAO模型以及杨和查普曼的能力模型为基础，从风险管理视角归纳总结国外个人数据保护官职责体系和能力素质要求。[结果/结论] 目前国外个人数据保护官的类型多样，有业务类型也有顾问类型，有决策层的也有基层的。从风险管理视角来看，个人数据保护官承担隐私法律风险管控的重要职责，而胜任这些职责，则需要具有相应隐私法律知识、信息分析知识等，应具有问题敏感性、解决问题、善于沟通等能力，应具有注重细节、适应复杂和快捷工作环境等特质。
[Purpose/significance] This paper summarizes and analyzes the meaning, type, responsibility and ability quality requirements of foreign personal data protection officers in theory, and provides academic analysis and suggestions for the application of China's practical field. [Method/process] The origin and meaning of personal data protection officers are examined through literature backtracking. Based on the KSAO model and the ability model of Yang and Chapman, this paper sums up the responsibility system and ability quality requirements of foreign personal data protection officers from the perspective of risk management, referring to the recruitment bulletins of the personal data protection officer in the Linkedin and the related professional specifications of US O*NET system. [Result/conclusion] At present, there are various types of personal data protection officers abroad, including business type and consultant type. From the perspective of risk management, the personal data protection officer takes on the important responsibilities of the privacy legal risk management and control. In order to complete these responsibilities, the personal data protection officer needs relevant privacy legal knowledge, information analysis knowledge and so on, needs the abilities of being sensitivity to problem, solving problem and good communication, and needs to be able to pay attention to details and adapt to the complex and rapid working.
[1] 周庆山.完善我国个人信息保护管理制度的思考[J].社会治理,2018(1):34-41.
[2] 詹新惠.首席隐私官[J].青年记者,2011(7):85.
[3] 聂正军.首席隐私官眼中的数据安全[J].杭州(周刊),2017(17):28-29.
[4] 贺骏. 奇虎360首设"首席隐私官":隐私保护要从"奢侈品"变"必需品"[N]. 证券日报,2012-03-21(D02).
[5] 胡晓荷."百变角色王"谈大数据时代信息安全防护策略——访奇虎360科技有限公司首席隐私官、副总裁谭晓生[J].信息安全与通信保密,2016(11):87-91.
[6] 辛闻. IT时代盛行CPO[N]. 厂长经理日报,2001-07-20(A03).
[7] 全球企业法律顾问协会.Dun & Bradstreet首席隐私官兼高级合规顾问Aryeh Friedman:应对合规挑战的成功之道[J].法人,2012(5):20-22.
[8] AWAZU Y, DESOUZA K C. The knowledge chiefs:CKOs, CLOs and CPOs[J].European management journal,2004, 22(3):339-344.
[9] WEE J, MA S, KIM S. The impact of chief privacy officers' background knowledge and role on organizational privacy performance[EB/OL].[2018-06-17]. http://iieng.org/images/proceedings_pdf/9571E0214076.pdf.
[10] PEMBERTON J M. Chief privacy officer:your next career?[J].The information management journal, 2012,36(3):57-58.
[11] PAUL L. The data protection officer profession, rules, and role[M].Boca Raton:Taylor & Francis Group,2016.
[12] LHOIRY X D,NORRIS C. The honest data protection officer's guide to enable citizens to exercise their subject access rights:lessons from a ten-country European study[EB/OL].[2018-06-17]. http://eprints.whiterose.ac.uk/86163/.
[13] 本刊.首席隐私官只是昙花一现?[N].计算机世界,2006-03-20(B15).
[14] DIMICK C. The new privacy officer[J]. Journal of AHIMA,2012,83(4):20-25.
[15] 本刊编委.又一网络新兴职位:CPO[J].计算机与网络,2000(21):34.
[16] 本刊编辑.IBM诞生世界首位隐私官[J]. 石油工业计算机应用,2001(1):52.
[17] 高富平.个人数据保护和利用国际规则:源流与趋势[M].北京:法律出版社,2016.
[18] 李小汇.个人数据保护德国有长处[J].中国国情国力,1997(12):41.
[19] EUROJUST. Council decision[EB/OL].[2018-02-22]. http://www.eurojust.europa.eu/doclibrary/Eurojust-framework/ejdecision/Eurojust%20Decision%20(Council%20Decision%202002-187-JHA)/Eurojust-Council-Decision-2002-187-JHA-EN.pdf.
[20] EU. General data protection regulation[EB/OL].[2018-02-20]. http://data.consilium.europa.eu/doc/document/ST-5419-2016-INIT/en/pdf.
[21] 蔡宁伟.银行首席合规官设立的中外比较——基于重要性、必要性与可行性的分析[J].西南金融,2017(11):59-64.
[22] U.S. Department of Labor. O*ONE OnLine[EB/OL].[2018-03-10]. https://www.onetonline.org.
[23] 孙立新.风险管理[M].北京:经济管理出版社,2014:23.
[24] AWAZU Y, DESOUZA K C. The knowledge chiefs:CKOs, CLOs and CPOs[J].European management journal,2004,22(3):339-344.
[25] TIKKINEN-PIRI C, ROHUNEN A, MARKKULA J. EU general data protection regulation:changes and implications for personal data collecting companies[J]. Computer law & security review, 2018,34(1):134-153.
[26] 宋景琪.以胜任力为基础的人力资源管理研究[J].中国管理信息化,2015,18(12):95.
[27] YOUNG J, CHAPMAN E. Generic competency frameworks:a brief historical overview[J]. Education research and perspectives,2011,37(1):1-24.
[28] 杜瑞军,周廷勇,周作宇.大学生能力模型建构:概念、坐标与原则[J].教育研究,2017,38(6):44-57.
[29] KIM S. Designating a data protection officer[J]. Research world, 2017(63):38.
