[目的/意义] 从政策的角度,调查加拿大隐私影响评估的政策支持,为我国隐私影响评估政策制定提供参考,为政府保护公民隐私提供工具。[方法/过程] 利用文献调研和案例分析的研究方法,以加拿大为例,通过对文献资料和网站内容的调查,获取一手资料阐述加拿大隐私影响评估政策的发展历程,对政策目标、政策主体、政策内容进行梳理,并在此基础上分析加拿大隐私影响评估政策的优势和不足。[结果/结论] 提出提高政策执行人员技能、尽早制定PIA政策、加强PIA政策认同的建议。
[Purpose/significance] From the perspective of policy, this paper investigates the policy support of the privacy impact assessment in Canada to provide reference for the policy formulation of the privacy impact assessment in China and provide tools for the government to protect citizens' privacy.[Method/process] Using the research methods of literature research and case analysis, taking Canada as an example, this paper expounded the development process of the privacy impact assessment policy in Canada by obtaining first-hand materials through the investigation of literature and website contents, and sorted out the policy objectives, policy subjects and policy contents. On this basis, it analyzed the advantages and disadvantages of the privacy impact assessment policy in Canada.[Result/conclusion] This paper puts forward suggestions on improving the skills of policy executives, formulating PIA policies as early as possible, and strengthening the identification of PIA policies.
[1] 相丽玲, 张轩瑜.中外用户隐私影响评估标准比较[J/OL]. 情报理论与实践.[2021-06-27]. https://kns.cnki.net/kcms/detail/11.1762.G3.20210301.1633.004.tml.
[2] 崔聪聪, 许智鑫. 数据保护影响评估制度:欧盟立法与中国方案[J]. 图书情报工作, 2020, 64(5):43-51.
[3] 陈朝兵, 郝文强.作为政府工具的隐私影响评估:缘起、价值、实施与启示[J]. 中国行政管理, 2020(2):144-151.
[4] Annual report to parliament 1999-2000[EB/OL]. [2021-06-27]. https://www.priv.gc.ca/en/opc-actions-and-decisions/ar_index/02_04_08/.
[5] Privacy impact assessment policy[EB/OL]. [2021-06-27]. https://www.tbs-sct.gc.ca/pol/doc-eng.aspx?id=12450.
[6] Treasury board of canada secretariat. Privacy impact assessment guidelines:a framework to manage privacy risks[EB/OL]. [2021-06-27]. http://www.tbs-sct.gc.ca/pubs_pol/ciopubs/pia-pefr/paipg-pefrld-PR-eng.asp?printable=True.
[7] Treasury board of canada secretariat. Preliminary privacy impact assessment template[EB/OL]. [2020-07-07]. http://www.tbs-sct.gc.ca/pgol-pged/ppia-epfvp/prelim-temp-modl/prelim-temp-modl00-eng.asp.
[8] Treasury board of canada secretariat. Reporton pia best practices[EB/OL]. [2020-07-14]. http://www.tbs-sct.gc.ca/pgol-pged/pia-best/pia-bestpr-eng.asp?format=print.
[9] Treasury board of canada secretariat. PIA e-learning tool[EB/OL]. [2020-07-26]. http://www.tbs-sct.gc.ca/pgol-pged/piatp-pfefvp/index-eng.asp.
[10] Privacy act[EB/OL]. [2020-08-12]. https://laws-lois.justice.gc.ca/PDF/P-21.pdf.
[11] Personal information protection and electronic documents act (pipeda) (canada)[EB/OL]. [2020-08-14]. http://laws.justice.gc.ca/en/showdoc/cs/P-8.6//20090821/en?command=search&caller=SI&search_type=all&shorttitle=Personal%20information%20protection%20and%20electronic%20documents%20act&day=21&month=8&year=2009&search_domain=cs&showall=L&statuteyear=all&lengthannual=50&length=50. Accessed on:21 August 2009.
[12] Treasury Board of Canada Secretariat.Privacy impact assessment audit guide[EB/OL]. [2020-09-14]. http://www.collectionscanada.gc.ca/webarchives/20071211001631/www.tbs-sct.gc.ca/ia-vi/policies-politiques/pia-efvp/pia-efvp_e.asp.
[13] Privacy and data protection policy[EB/OL]. [2020-10-11]. http://www.tbs-sct.gc.ca/pubs_pol/gospubs/TBM_128/dwnld/chap1_1_e.rtf.
[14] Privacy regulations[EB/OL]. [2020-10-24]. https://laws-lois.justice.gc.ca/eng/regulations/SOR-83-508/index.html.
[15] Directive on privacy impact assessment[EB/OL]. [2020-11-14]. http://www.rogerclarke.com/DV/TBC-2010.pdf.
[16] Interim policy on privacy protection[EB/OL]. [2020-11-14]. https://www.tbs-sct.gc.ca/pol/doc-eng.aspx?id=12510.
[17] Interim directive on privacy practices[EB/OL]. [2020-11-24]. https://www.tbs-sct.gc.ca/pol/doc-eng.aspx?id=18309.
[18] Expectations:opc's guide to the privacy impact assessment process[EB/OL]. [2020-01-14]. https://www.priv.gc.ca/en/privacy-topics/privacy-impact-assessments/gd_exp_202003/#toc4-9.
[19] Office of the privacy commissioner of Canada[EB/OL]. [2020-10-13]. https://www.priv.gc.ca/en/.
[20] Privacy impact assessment[EB/OL]. [2020-10-06]. https://www.priv.gc.ca/en/opc-news/speeches/02_05_a_020508/.
[21] The role of the privacy impact assessment[EB/OL]. [2020-10-11]. https://www.priv.gc.ca/en/opc-news/speeches/2004/sp-d_040310/.
[22] The privacy impact assessment:your gps through the new landscape of privacy protection[EB/OL]. [2020-10-24]. https://www.priv.gc.ca/en/opc-news/speeches/2011/sp-d_20110928_cb/.
[23] Facing the breach:privacy and security as an ecosystem[EB/OL]. [2020-04-04]. https://www.priv.gc.ca/en/opc-news/speeches/2013/sp-d_20130618_cb/.
[24] A risk based approach for accountability and compliance[EB/OL]. [2020-04-15]. https://www.priv.gc.ca/en/opc-news/speeches/2013/sp-d_20130926_cb/.
[25] Working together as privacy champions[EB/OL]. [2020-04-26]. https://www.priv.gc.ca/en/opc-news/speeches/2014/sp-d_20141210/.
[26] The interconnected worlds of privacy and cyber-security[EB/OL]. [2020-05-04]. https://www.priv.gc.ca/en/opc-news/speeches/2016/sp-d_20160420/.
[27] Modernizing federal privacy laws to better protect canadians[EB/OL]. [2020-05-11]. https://www.priv.gc.ca/en/opc-news/speeches/2020/sp-d_20200309/.
[28] Treasury Board of Canada Secretariat[EB/OL]. [2020-05-19]. https://www.canada.ca/en/treasury-board-secretariat.html.
[29] Financial administration act-laws.justice.gc.ca[EB/OL]. [2020-05-26]. https://laws-lois.justice.gc.ca/eng/acts/f-11/page-2.html#h-228122.
[30] Personal information protection policy[EB/OL]. [2020-06-04]. https://www.ferocorp.com/pages/privacy.html.
[31] Directive on privacy requests and correction of personal information[EB/OL]. [2020-07-23]. https://www.tbs-sct.gc.ca/pol/doc-eng.aspx?id=18311.
[32] Directive on social insurance number[EB/OL]. [2020-08-11]. https://www.tbs-sct.gc.ca/pol/doc-eng.aspx?id=13342.
[33] 陈美, 谭纬东.政府开放数据的隐私风险评估与防控:新西兰的经验[J]. 情报理论与实践, 2020, 43(5):110-114, 90.
[34] Consultation on the opc's proposals for ensuring appropriate regulation of artificial intelligence[EB/OL]. [2020-09-18]. https://www.priv.gc.ca/en/about-the-opc/what-we-do/consultations/consultation-ai/pos_ai_202001/.
[35] 周庆山. 完善我国个人信息保护管理制度的思考[J]. 社会治理, 2018(1):34-41.
[36] 重磅!个人信息保护法、数据安全法终于要来了![EB/OL]. [2020-10-16]. https://k.sina.com.cn/article_1750987934_685df49e01900mv0l.html?from=news&subch=onews.
[37] 民法典规定的隐私权和个人信息保护[EB/OL]. [2020-10-17]. http://m.workercn.cn/wq/2020/0804/200804093628350.shtml.
[38] 最高法、国家发改委发布意见:加强数据权利和个人信息安全保护[EB/OL]. [2020-10-18]. https://www.sohu.com/a/410614389_741570.
[39] 《中华人民共和国个人信息保护法(草案)》首次亮相[EB/OL]. [2020-10-19]. https://www.sohu.com/a/424842464_100014118.
[40] 《个人信息安全影响评估指南》(GB/T 39335-2020)正式发布[EB/OL]. [2021-06-05]. https://www.secrss.com/articles/27363.