[Purpose/Significance] In the era of artificial intelligence（AI）, there is a profound contradiction between the collection and utilization of massive data and the protection of data privacy, which seriously hinders the development of AI. It is of great significance to study the norms and constraints of governments, enterprises, industry organizations, and users on data privacy protection. [Method/Process] This paper analyzed data privacy issues at the institutional, technical, and social ethical levels, systematically sorted out various normative documents on data privacy protection at home and abroad, extracted the mandatory heteronomous schemes in the dimensions of data cross-border, scenario-based legislation, and data risk management, as well as the spontaneous autonomous schemes involving various stakeholders, and revealed their shortcomings. [Result/Conclusion] For the protection of AI data privacy, it is necessary to accelerate AI legislation, strengthen the effectiveness of business supervision, enhance the external supervision of Autonomy, promote AI education, build industry autonomous consensus, promote the collaboration of autonomous subjects, and advance cross-border data protection.
[1] LI X, ZHANG T. An exploration on artificial intelligence application:from security, privacy and ethic perspective[C]//Proceedings of 2017 IEEE 2nd international conference on cloud computing and big data analysis (ICCCBDA). New York:IEEE,2017:416-420.
[2] 赵梓羽.生成式人工智能数据安全风险及其应对[J].情报资料工作, 2024, 45(2):30-37.(ZHAO Z Y. Data security risks and countermeasures of generative artificial intelligence[J].Information and documentation services, 2024, 45(2):30-37.)
[3] 王大志,张挺.风险、困境与对策:生成式人工智能带来的个人信息安全挑战与法律规制[J].昆明理工大学学报(社会科学版), 2023, 23(5):8-17.(WANG D Z, ZHANG T. Risks,dilemmas and countermeasures:personal information security challenges and legal regulation caused by generative artificial intelligence[J]. Journal of Kunming University of Science and Technology (social sciences), 2023, 23(5):8-17.)
[4] 华劼.人工智能时代的隐私保护--兼论欧盟《通用数据保护条例》条款及相关新规[J].兰州学刊, 2023(6):97-108.(HUA J. Privacy protection under the artificial intelligence era:analysis of provisions in EU General Data Protection Regulation and related proposals for new regulations[J]. Lanzhou academic journal, 2023(6):97-108.)
[5] ISHII K. Comparative legal study on privacy and personal data protection for robots equipped with artificial intelligence:looking at functional and technological aspects[J]. AI&society, 2019,34:509-533.
[6] 郑曦,朱溯蓉.生成式人工智能的法律风险与规制[J].长白学刊, 2023(6):80-88.(ZHENG X, ZHU S R. The legal risks and regulation of generative artificial intelligence[J]. Changbai journal, 2023(6):80-88.)
[7] 刘迈.生成式人工智能的物流数据风险及其法律规制--以ChatGPT为例[J].物流工程与管理, 2023, 45(12):137-139.(LIU M. Logistics data risks of generative artificial intelligence and its legal regulation taking ChatGPT as an example[J]. Logistics engineering and management, 2023,45(12):137-139.)
[8] 侯东德.人工智能法的基本问题及制度架构[J].政法论丛,2023(6):61-72.(HOU D D. Basic problems and institutional framework of artificial intelligence law[J]. Journal of political science and law, 2023(6):61-72.)
[9] 徐继敏.生成式人工智能治理原则与法律策略[J].理论与改革, 2023(5):72-83.(XU J M. Governance principles and legal strategies of generative artificial intelligence[J]. Theory and reform, 2023(5):72-83.)
[10] 杨会军,程啟华.人工智能技术发展中伦理问题的思考[J].中国新通信, 2023, 25(18):35-37.(YANG H J, CHENG Q H.Consideration of ethical issues in the development of artificial intelligence technology[J]. China new telecommunications, 2023,25(18):35-37.)
[11] 肖艺能.数字经济时代人工智能的伦理风险及治理[J].山西财经大学学报, 2023, 45(S2):77-79.(XIAO Y N. Ethical risk and corresponding governance of artificial intelligence in the digital economy era[J]. Journal of Shanxi University of Finance and Economics, 2023, 45(S2):77-79.)
[12] 黄刘生,田苗苗,黄河.大数据隐私保护密码技术研究综述[J].软件学报, 2015, 26(4):945-959.(HUANG L S, TIAN M M, HUANG H. A review of big data privacy protection cryptography[J]. Journal of software, 2015, 26(4):945-959.)
[13] 中国信息通信研究院.人工智能治理白皮书[EB/OL].[2025-03-17]. http://www.caict.ac.cn/kxyj/qwfb/bps/202009/P020200928368250504705.pdf.(China Academy of Information and Communications Technology. White book on artificial intelligence governance[EB/OL].[2025-03-17]. http://www.caict.ac.cn/kxyj/qwfb/bps/202009/P020200928368250504705.pdf.)
[14] 罗早西.人工智能如何影响跨境数据流动规则[J].中国外资,2023(19):44-47.(LUO Z X. How does AI affect cross-border data flow rules[J]. Foreign investment in China, 2023(19):44-47.)
[15] 王群,付丽娟.人工智能侵权责任探析[J].齐齐哈尔大学学报(哲学社会科学版), 2023(10):107-110.(WANG Q, FU L J. Analysis of artificial intelligence tort liability[J]. Journal of Qiqihar University (philosophy&social science edition),2023(10):107-110.)
[16] DILMAGHANI S, BRUST M R, DANOY G, et al. Privacy and security of big data in AI systems:a research and standards perspective[C]//Proceedings of 2019 IEEE international conference on big data. New York:IEEE, 2019:5737-5743.
[17] CURZON J, KOSA T A, AKALU R, et al. Privacy and artificial intelligence[J]. IEEE transactions on artificial intelligence, 2021,2(2):96-108.
[18] 韩成芳.医疗人工智能领域个人健康数据保护的困境及其破解[J].科技与法律(中英文), 2024(1):54-60.(HAN C F.The dilemma and solution of personal health data protection in medical Al[J]. Science technology and law (Chinese-English version), 2024(1):54-60.)
[19] 丁晓东.论算法的法律规制[J].中国社会科学, 2020(12):138-159, 203.(DING X D. On the legal regulation of algorithms[J].Social sciences in China, 2020(12):138-159, 203.)
[20] STRMEČKI S, PEJAKOVIĆ-ĐIPIĆS. Data protection,privacy and security in the context of artificial intelligence and conventional methods for law enforcement[J]. EU and comparative law issues and challenges series (ECLIC), 2023, 7:571-589.
[21] XU Z, XIANG D, HE J. Data privacy protection in news crowdfunding in the era of artificial intelligence[J]. Journal of global information management, 2021, 30(7):1-17.
[22] Council of Europe. Convention 108+[EB/OL].[2025-03-17]. https://rm.coe.int/convention-108-convention-for-the-protectionof-individuals-with-regar/16808b36f1.
[23] 齐湘泉,文媛怡.构建"一带一路"个人数据跨境传输法律制度:分歧、共识与合作路径[J].河南师范大学学报(哲学社会科学版), 2019, 46(6):71-80.(QI X Q, WEN Y Y. Establishing regional legal system regulating the trans-border personal data flow among B&R countries:divergence, consensus and cooperative approach[J]. Journal of Henan Normal University (philosophy and social sciences edition), 2019, 46(6):71-80.)
[24] U.S. Department of Commerce. EU-U.S. data privacy frame work[EB/OL].[2025-03-17]. https://www.dataprivacyframework.gov/EU-US-Framework.
[25] 齐鹏.数字经济背景下"一带一路"跨境数据传输的法律规制[J].法学评论, 2022, 40(6):165-179.(QI P. Legal regulation of cross-border data transmission under "Belt and Road" in context of digital economy[J]. Law review, 2022, 40(6):165-179.)
[26] Congress.gov. Safely ensuring lives future deployment and research in vehicle evolution act[EB/OL].[2025-03-17]. https://www.congress.gov/115/crpt/hrpt294/CRPT-115hrpt294.pdf.
[27] 蒋永传.生成式人工智能数据风险的法律规制[J].太原理工大学学报(社会科学版), 2024, 42(1):29-35.(JIANG Y C.Legal regulation of generative artificial intelligence data risk[J].Journal of Taiyuan University of Technology (social science edition), 2024, 42(1):29-35.)
[28] 全国人民代表大会.中华人民共和国数据安全法[EB/OL].[2025-03-17]. http://www.npc.gov.cn/npc/c2/c30834/202106/t20210610_311888.html.(The National People's Congress (NPC) of the People's Republic of China. Data Security Law of the People's Republic of China[EB/OL].[2025-03-17]. http://www.npc.gov.cn/npc/c2/c30834/202106/t20210610_311888.html.)
[29] European Commission. EU Artificial Intelligence Act[EB/OL].[2025-03-17]. https://www.europarl.europa.eu/doceo/document/TA-9-2024-0138-FNL-COR01_EN.pdf.
[30] American Legal Publishing. New York City Administrative Code[EB/OL].[2025-03-17]. https://codelibrary.amlegal.com/codes/newyorkcity/latest/NYCadmin/0-0-0-202942.
[31] 广东省政务服务和数据管理局.广东省人民政府办公厅关于印发广东省首席数据官制度试点工作方案的通知[EB/OL].[2025-03-17]. https://zfsg.gd.gov.cn/zwgk/wjk/content/post_3283320.html.(Guangdong Provincial Government Services and Data Administration Bureau. Notice of the General Office of the Guangdong Provincial People's Government on issuing the pilot work program of the chief data officer system of Guangdong Province[EB/OL].[2025-03-17]. https://zfsg.gd.gov.cn/zwgk/wjk/content/post_3283320.html.)
[32] Google, AI at Google:our principles[EB/OL].[2025-03-17]. https://blog.google/technology/ai/ai-principles/.
[33] SMITH B. The future computed:artificial intelligence and its role in society[M]. Washington:Microsoft Corporation Redmond,2018.
[34] IBM. AI Ethics[EB/OL].[2025-03-17]. https://www.ibm.com/cnzh/topics/ai-ethics.
[35] 上海商汤智能科技有限公司."平衡发展"的人工智能治理白皮书--商汤人工智能伦理治理年度报告(2022年)[EB/OL].[2025-03-17]. https://www.sensetime.com/cn/news-detail/51164844?categoryId=72.(SenseTime. "Balanced Development" white book on AI governancesensetime AI ethical governance annual report (2022)[EB/OL].[2025-03-17]. https://www.sensetime.com/cn/newsdetail/51164844?categoryId=72.)
[36] 北京百度网讯科技有限公司.自律性原则申明[EB/OL].[2025-03-17]. https://ai.baidu.com/ai-doc/REFERENCE/xk3dwjgfe.(Beijing Baidu Netcom Science Technology Co.,Ltd.. Declaration of principles of self-discipline[EB/OL].[2025-03-17]. https://ai.baidu.com/ai-doc/REFERENCE/xk3dwjgfe.)
[37] 隐私计算联盟,中国信息通信研究院.隐私计算法律与合规研究白皮书(2021年)[EB/OL].[2025-03-17]. https://13115299.s21i.faiusr.com/61/1/ABUIABA9GAAghreRjgYo_v3__QU.pdf.(Confidentialcomputing.io, China Academy of Information and Communications Technology. Privacy-preserving computation law and compliance research white paper (2021)[EB/OL].[2025-03-17]. https://13115299.s21i.faiusr.com/61/1/ABUIABA9GAAghreRjgYo_v3__QU.pdf.)
[38] 阿里巴巴集团. AAIG成立一周年!砥砺前行,谱写新时代的科技之歌-请查收这份最新的自我介绍[EB/OL].[2025-03-17]. https://mp.weixin.qq.com/s/wA5ja4utNOR7SufGHnoFHA.(Alibaba Group. AAIG's 1st anniversary!forge ahead and compose the song of science and technology in the new era-please check this latest self-introduction[EB/OL].[2025-03-17]. https://mp.weixin.qq.com/s/wA5ja4utNOR7SufGHnoFHA.)
[39] 腾讯公司.优tech分享|强化人脸安全,腾讯优图提出深度伪造溯源新基准[EB/OL].[2025-03-17]. https://open.youtu.qq.com/#/open/news/44.(Tencent. To strengthen face security, Tencent Youtu proposes a new benchmark for deepfake traceability[EB/OL].[2025-03-17]. https://open.youtu.qq.com/#/open/news/44.)
[40] 中国信息通信研究院.全球人工智能治理体系报告(2020)[EB/OL].[2025-03-17]. http://www.caict.ac.cn/kxyj/qwfb/ztbg/202012/t20201229_367258.htm.(China Academy of Information and Communications Technology. Report on the global AI governance system (2020)[EB/OL].[2025-03-17]. http://www.caict.ac.cn/kxyj/qwfb/ztbg/202012/t20201229_367258.htm.)
[41] Future of Life Institute. Asilomar AI principles[EB/OL].[2025-03-17]. https://futureoflife.org/open-letter/ai-principles-chinese/.
[42] UNI Global Union. 10 Principles for ethical artificial intelligence[EB/OL].[2025-03-17]. https://uniglobalunion.org/report/10-principles-for-ethical-artificial-intelligence/.
[43] IEEE Standards Association.人工智能设计的伦理准则(第2版)概要[EB/OL].[2025-03-17]. https://standards.ieee.org/wp-content/uploads/import/documents/other/ead_v2_executive_summary_chinese.pdf.(IEEE Standards Association. Overview of the code of ethics for AI design (2nd edition)[EB/OL].[2025-03-17]. https://standards.ieee.org/wp-content/uploads/import/documents/other/ead_v2_executive_summary_chinese.pdf.)
[44] 北京智源人工智能研究院.人工智能北京共识[EB/OL].[2025-03-17]. https://baike.baidu.com/item/% E4% BA% BA% E5% B7% A5% E6% 99% BA% E8% 83% BD% E5% 8C% 97% E4% BA% AC% E5% 85% B1% E8% AF% 86/23515671.(Beijing Academy of Artificial Intelligence. Beijing consensus on artificial intelligence[EB/OL].[2025-03-17]. https://baike.baidu.com/item/% E4% BA% BA% E5% B7% A5% E6% 99% BA% E8% 83% BD% E5% 8C% 97% E4% BA% AC% E5% 85% B1% E8% AF% 86/23515671.)
[45] 中国人工智能产业发展联盟.人工智能行业自律公约(征求意见稿)[EB/OL].[2025-03-17]. http://www.chinaweekly.cn/html/yaowen/15578.html.(Artificial Intelligence Industry Alliance. Self-discipline convention on artificial intelligence industry (draft for comments)[EB/OL].[2025-03-17]. http://www.chinaweekly.cn/html/yaowen/15578.html.)
[46] 中国中小商业企业协会.基于机器学习与智能建模的人工智能应用数据采集规范:T/CASME 1158-2023[S/OL].[2025-03-17]. https://www.spc.org.cn/online/72f0f124a6ef2f8e175c b3533d15003d.html.(China Association for Small&Medium Commercial Enterprises. Specification of data collection for artificial intelligence applications based on machine learning and intelligent modeling:T/CASME 1158-2023[S/OL].[2025-03-17]. https://www.spc.org.cn/online/72f0f124a6ef2f8e175cb3533d15003d.html.)
[47] 上海市人工智能技术协会.人工智能计算机视觉系统测评规范:T/SAITA 001-2021[S/OL].[2025-03-17]. https://www.ttbz.org.cn/upload/file/20210811/6376427181025929219344380.pdf.(Shanghai Artificial Intelligence Technology Association.Artificial intelligence-specification for computer vision system testing and evaluation:T/SAITA 001-2021[S/OL].[2025-03-17]. https://www.ttbz.org.cn/upload/file/20210811/6376427181025929219344380.pdf.)
[48] 中国互联网协会.人工智能模型风险管理能力成熟度模型:T/ISC 0028-2023[S/OL].[2025-03-17]. https://www.isc.org.cn//profile//2023/06/13/ea7bd0a6-b751-4d7c-9ec2-f47b59f66fd1.pdf.(Internet Society of China. Capability maturity model for risk management of artificial intelligence model:T/ISC 0028-2023[S/OL].[2025-03-17]. https://www.isc.org.cn//profile//2023/06/13/ea7bd0a6-b751-4d7c-9ec2-f47b59f66fd1.pdf.)
[49] IEEE Standards Association. IEEE标准化项目概况[EB/OL].[2025-03-17]. https://standards.ieee.org/wp-content/uploads/import/documents/other/eadv2_about_us_chinese.pdf.(IEEE Standards Association. Overview of the IEEE standardization project[EB/OL].[2025-03-17]. https://standards.ieee.org/wpcontent/uploads/import/documents/other/eadv2_about_us_chinese.pdf.)
[50] 中国信息通信研究院.人工智能安全框架(2020年)[EB/OL].[2025-03-17]. http://www.caict.ac.cn/kxyj/qwfb/ztbg/202012/P020201209408499730071.pdf.(China Academy of Information and Communications Technology. AI security framework (2020)[EB/OL].[2025-03-17]. http://www.caict.ac.cn/kxyj/qwfb/ztbg/202012/P020201209408499730071.pdf.)
[51] 张银荣,杨刚,徐佳艳,等.人工智能素养模型构建及其实施路径[J].现代教育技术, 2022, 32(3):42-50.(ZHANG Y R, YANG G, XU J Y, et al. The cultivation of AI literacy model and its implementation path[J]. Modern educational technology,2022, 32(3):42-50.)
[52] 郑勤华,覃梦媛,李爽.人机协同时代智能素养的理论模型研究[J].复旦教育论坛, 2021, 19(1):52-59.(ZHENG Q H, QIN M Y, LI S. Study on the theoretical model of artificial intelligence competency in the era of human-machine collaboration[J]. Fudan education forum, 2021, 19(1):52-59.)
[53] 北京百度网讯科技有限公司.文心一言用户协议[EB/OL].[2025-03-17]. https://yiyan.baidu.com/infoUser.(Beijing Baidu Netcom Science Technology Co., Ltd.. ERNIE Bot user agreement[EB/OL].[2025-03-17]. https://yiyan.baidu.com/infoUser.)
[54] 科大讯飞股份有限公司. SparkDesk用户协议[EB/OL].[2025-03-17]. https://www.xfyun.cn/doc/spark/ExperienceRules.html.(IFLYTEK CO., Ltd.. SparkDesk user agreement[EB/OL].[2025-03-17]. https://www.xfyun.cn/doc/spark/ExperienceRules.html.)
[55] CopyAI, Inc.. Terms of service[EB/OL].[2025-03-17]. https://www.copy.ai/terms-of-service.
[56] Midjourney Inc.. Terms of service[EB/OL].[2025-03-17]. https://docs.midjourney.com/docs/terms-of-service.
[57] 沈岿.数据治理与软法[J].财经法学, 2020(1):3-12.(SHEN K. Data governance and soft law[J]. Law and economy, 2020(1):3-12.)
[58] 王雪,石巍.个人数据域外管辖权的扩张及中国进取型路径的构建[J].河南社会科学, 2022, 30(5):56-67.(WANG X, SHI W. Expansion for extraterritorial jurisdiction of personal data and construction of proactive path in China[J]. Henan social sciences,2022, 30(5):56-67.)
