国际中文开源期刊平台

论作为我国个人信息出境监管工具的标准合同

On the Standard Contract as a Tool for the Outbound Supervision of Personal Information in China

社会科学进展 / 2024,6(3)：600-614. / 2024-06-04 185 164

查看全文 下载文档

• 作者： 于剑桥      李俊贤     
• 单位：

  上海政法学院，上海

• 关键词： 个人信息；个人信息出境传输；标准合同；利益第三人条款
• Personal information; Outbound transmission of personal information; Standard contract; Interest third-party clause
• 摘要： 《个人信息保护法》第三十八条第一款第三项中规定了“标准合同”，标志着标准合同正式成为我国个人信息出境传输的监管工具，其后网信办依据授权制定的个人信息出境标准合同办法及其附件实现对标准合同的具体落实。标准合同同时约束合同双方，还具有对第三人的保护功能，单从形式上看属于双方合意签订的合同，但实际具有双重属性即个别规范和国家法规范，内容由国家预先规定并强制适用。合同双方的主给付义务是对个人信息进行全面保护，这是实际上是将《个人信息保护法》中的法定义务通过“合同条款”的方式落实为合同义务，其范围涵盖对个人信息安全保障，采取措施避免个人信息安全事件发生或进行必要补救等。标准合同中的受益第三人条款，是个人信息主体得以行驶更正、删除、查询等权利和违约损害赔偿请求权的法理基础。对个人信息出境标准合同性质、功能、内容进行分析，有助于我们理解标准合同的制定目的、适用范围和适用方式。
• Item 3 of the first paragraph of Article 38 of the Personal Information Protection Law stipulatesthe “standard contract”, which indicates that the standard contract has officially become a supervision toolfor the outbound transmission of personal information in China. After that, the Measures for the standardcontract for the exit of personal information and its attachments formulated by the authorization of theCyberspace Administration of China have realized the specific implementation of the standard contract.The standard contract also binds both parties to the contract, and also has the function of protecting thethird party. In terms of form, it belongs to the contract agreed by both parties, but it actually has dualattributes, that is, individual norms and national laws, and the content is predetermined and enforced bythe state. The main payment obligation of both parties to the contract is to carry out the comprehensiveprotection of personal information. This is actually the implementation of the legal obligations in thePersonal Information Protection Law into contractual obligations through the form of “contract clauses”.The scope covers the security of personal information and measures to avoid the occurrence or necessityof personal information security incidents. Remediation, etc. The clause of the beneficiary third partyin the standard contract is the legal basis for the subject of personal information to exercise the right tocorrect, delete, inquire, etc. and claim damages for breach of contract. Analyzing the nature, function andcontent of the personal information exit standard contract will help us understand the purpose, scope ofapplication and application method of the standard contract.
• DOI： https://doi.org/10.35534/pss.0603050
• 引用： 于剑桥，李俊贤．论作为我国个人信息出境监管工具的标准合同［J］．社会科学进展，2024，6（3）：600-614.