Electronic data retrieved the dilemma and response of the compliance obligations of Chinese corporate corporate compliance
July 25, 2023 09:59 Source: "China Social Sciences" July 25, 2023 Issue 2698 Author: Wang Zhongyang

In criminal investigation,Public security organs have retrieved electronic data from the enterprise as a network service provider.。To ensure the smooth development of the retraction activity,Article 54 of the Criminal Procedure Law、Article 35 of the Data Security Law, etc., all stipulate that network service providers should fulfill the obligation to retrieve assistance。But,When responding to the request of the law enforcement agency to retrieve the request,Enterprises need to disclose the customer's personal information to the case person handling,Not conducive to fulfilling compliance obligations to protect personal information。For this,Related laws and regulations have not set up corresponding coordination mechanisms,Destructive conflict between the two obligations。For example,In the killing case of Didi driver Zhongmou,Didi Platform rejected the police's retrieval request for protecting privacy,Time to detect the case of the case。The case reflects the choice of the company when facing the obligation of the obligation to assist in assistance and personal information protection,So,How to reconcile the relationship between the two obligations becomes the key to the in -depth development of enterprise compliance。

Exclusive to assisting obligations to cooperate with the law enforcement demands of public rights agencies,Conditions that carry the compulsory and obligations of the investigation behavior。Personal information protection compliance obligations originated from the contractual relationship between enterprises and citizens,The contractual obligation to perform is a faithful performance,Compliance control of internal performance as bet365 live casino games company behavior。However, when lacking a coordination mechanism,Public security organs are in a relatively strong position during the retrieval process,Leading the difficulties of corporate compliance obligations。

In practice,The strong position of the public security organs is mainly reflected in the following three points。First,The retracting measures have obvious compulsory。On the one hand,Development does not necessarily have to pass the consent of the enterprise,Even if the company expresses the willingness to refuse to cooperate,The investigation organs need to indicate the relevant matters for。On the other hand,"Data Security Law" Article 35 of the Public Security、When the National Security Organ needs to retrieve data to maintain national security or investigate crimes,Relevant organizations、Individual negative obligation; Article 48 of the law further stipulates,Violations of Article 35 of this Law will be warned、Penalties such as fines。Enterprises based on the purpose of avoiding punishment or worrying about the cooperation between government and enterprises,Often needs to be extracted for the retraction of the investigating agency,The performance of not conducive to compliance obligations。2,Generally, the behavior of general retrieval occurs mostly。On the one hand,Disciplinary information type,Not only the name、phone number、Corresponding address and other general personal information,It can also retrieve privacy information or sensitive information。On the other hand,Decodion information subject,Although its main object is the suspect,But it does not rule out the information that the victim or other unrelated to the third person。General retrieval behavior makes it difficult for enterprises to set a differentiated response mechanism,To enhance the protection of special information types or special subjects cannot be achieved,bet365 best casino games The principle of destination restrictions in the protection of personal information、minimum treatment principles do not match,Exhausting the dilemma of the performance of corporate compliance obligations。third,Economic costs are mostly borne by enterprises。Economic costs generated during the assistance process of enterprises,There is currently no national subsidy legal regulations。The "Criminal Procedure Law" regulations on economic subsidy obligations are only applicable to witnesses for testimony,Companies that cannot be applied to companies that fulfill their assistance obligations,This undoubtedly damages the economic interests of the enterprise。

A strong status with the public security organs,The weak position of the company is mainly reflected in the following two aspects。On the one hand,Enterprises performing the obligations of assistance and assistance in accordance with the law will not reduce or exempt their compliance obligations。Take the obligation as an example,At present, the exception of the notification in the legal specifications is only applicable to state organs,It did not use the enterprise as the main body of liability; and Article 18 of the Personal Information Protection Law "inform the exception and delay notification" regulations,In the absence of corresponding interpretation,It is also difficult to become the legal cause of corporate exemption。On the other hand,The role of the internal review mechanism of the enterprise is difficult to play。The corresponding compliance review mechanism is usually formulated within the enterprise,Make substantial and procedural review of the retracted behavior of the investigation agency。Theoretically,If you retrieve the necessary behavioral elements,Then the company can abide by the position of personal information protection,delay or refuse to be retrieved。But in practice,Even some investigating agencies violate the retrieved Bet365 lotto review approval subject、Delivery requirements、Record form、Recording and videos and other specification requirements,Enterprises do not have the ability to confront them。At this time, the corporate review mechanism did not play a substantial role,If you have only conducted internal review, you need to be exempt,It may not be established for its appeal。In other words,Even if the corresponding review mechanism is established within the enterprise,It is impossible to respond effective response to the problems of the conflict between the two obligations。

Dohaies for the performance of corporate compliance obligations,Enterprises can try to build a hierarchical response mechanism,The establishment of this mechanism needs to clarify the legal nature of the behavior first,The nature of its nature should be determined according to the degree of retrieval and the degree of infringement of basic rights。In the following circumstances,The retraction should be an arbitrary investigation: First, in the retracting method,The retracted behavior received the consent and assistance of the third -party institution,No need to implement it; the second is to retrieve the type of information,Only general personal information,Will not seriously infringe privacy。In the following circumstances,The retracted behavior should belong to the compulsory investigation: First, the investigation agency cannot obtain the consent and cooperation of the third -party institution,I have to forcibly retrieve personal information; the second is to retrieve objects that are privacy information or sensitive personal information,interfered with the basic rights of citizens。

Under the premise of distinguishing the nature of the law,Enterprises should review different circumstances,Establish a hierarchical response mechanism。First,You can adopt a general mechanism when facing any retrieved。If the retraction of the investigation agency meets the procedure requirements,and the retracted object bet365 live casino games is limited to general personal information,Enterprises should fulfill the obligation of law enforcement assistance,Cooperation with the retrieved work of the investigation agency。But at this time, it is still necessary to strictly control the scope of retraction,Can't disclose privacy information or sensitive personal information。Next,Strict mechanisms should be adopted when faced with forced retraction。If the retraction of the investigation agency exceeds the category of assistance obligations,or retrieved privacy information and sensitive personal information,Then the company should apply a higher -level cooperation response mechanism,Focus on whether the subject is in line with the subject of the mandatory investigation、Condition、program regulations。Last,Set differentiation mechanism for different retracted objects。If the target of the retrieved is the criminal suspect,then the principle of retrieved the priority of assisting the obligations,Enterprises shall follow the regulations of delayed notification,Inform the suspect related facts after the disappearance of the investigation disappears。If the target of the retrieved is the victim、Witnesses or other litigation participants,Enterprise should implement the "Personal Information Protection Law" on the consent of informedness,To inform the relevant matters in advance of the subject。

other,Enterprises should also establish an internal review mechanism。One,Enterprises should review the identity effectiveness of the subject。Enterprises should distinguish the retracting based on the purpose of authority and the private retrievement of the name of the name of the authority,Refusing to retrieve the request of private name。Its two,Enterprises should review and retrieve the procedure requirements。Focus on whether to obtain the request of the main body of the approval、Delivery bet365 best casino games form requirements、Refusing to sign the requirements for recording and video recording requirements when required and necessary。Its three,Enterprises shall review the specificity of the retrieved object and the scope of the retraction。The retraction should have a clear object and scope of retraction,Declaration of behavior has a case, not general。Four,Enterprises should review the types of personal information。In the process of fulfilling the obligation of the assistance of assistance,The types of personal information that should be retrieved should be reviewed,Determine whether there is a privacy information or sensitive personal information。Five,Enterprises should review whether there is an emergency。In emergency circumstances,Enterprises can restrict the compliance obligation of personal information protection,But the cause of the occurrence of urgent situations that need to be strictly reviewed。

For the judicial organs,On the one hand,Clarify the confrontation effectiveness of the internal review of the enterprise。The judicial organs should formulate the corresponding judicial interpretation in a timely manner,It is clearly stipulated that the internal review mechanism of the enterprise has the legal effect of confrontation from unreasonable retrieved,Therefore, it provides a guarantee for enterprises to perform personal information protection obligations。On the other hand,Exeminating the obligation to explore the obligation to establish personal information protection compliance。Article 13 of the Personal Information Protection Law stipulates the legality basis for handling personal information,Provides a legitimate basis for the company,The reason for the obligation to become a corporate compliance。For example,Rebcing the assistance obligations belong to legal obligations,The definition of "legal obligations" in Article 13 of the "Legal Obligations" in Article 13 of the "Legal Obligation" in Article 13。So,As long as it meets the "necessary" requirements bet365 live casino games at the same time,Enterprise will meet the relevant regulations of compliance,Effects to generate exemptional personal information protection compliance obligations。and,The judicial organs shall "have laws in Article 18 of the Personal Information Protection Law、Administrative regulations should be kept secret "" "No need to inform" and "emergency situation" three exceptions or delay notifications to explain instructions,to avoid or reduce the obligation of the enterprise。

Bet365 app download  

Editor in charge: Zhang Jing
QR code icon 2.jpg
Key recommendation
The latest article
Graphics
bet365 live casino games

Friendship link:

Website filing number: Jinggong.com Anmi 11010502030146 Ministry of Industry and Information Technology:

All rights reserved by China Social Sciences Magazine shall not be reprinted and used without permission

General Editor Email: zzszbj@126.com This website contact information: 010-85886809 Address: Building 1, Building, No. 15, Guanghua Road, Chaoyang District, Beijing: 100026