平台企业个人信息保护合规研究
Research on Personal Information Protection Compliance of Internet Companies

《中华人民共和国个人信息保护法》出台后，个人信息保护进入新时代，对隐私政策也提出了更为精准和严格的要求。在对于个人信息安全要求日益提高的大数据时代，个人信息的保护不仅仅停留在设置更详细的隐私政策并获得个人信息主体的同意，实务中，平台企业收集、储存、处理个人信息的业务模式有多种，需遵守最小、必要和公开透明原则，企业更应该关注个人信息收集、储存、使用全过程中的保护及合规风险，关注企业个人信息保护合规义务，以及企业内部风控体系的建立与真正执行，以避免企业因个人信息保护问题而带来的法律责任及企业商誉损失。
After the promulgation of the “Personal Information Protection Law”, personal information protec-tion has entered a new era, and more precise and strict requirements have been put forward for privacy policies. In the era of big data with increasing requirements for personal information security, the protection of personal information is not limited to setting more detailed privacy policies and obtaining the consent of the subject of personal information. In practice, there are many business models of Internet companies collecting, storing and processing personal information, and the principles of minimum, necessity and openness and transparency must be followed. Enterprises should pay more attention to the protection and compliance risks in the whole process of personal information collection, storage, and use, and pay attention to the compliance obligations of enterprises’ personal information protection, as well as the internal risk control system of enterprises. The establishment and real implementation of the company’s personal information protection can avoid legal liability and loss of corporate goodwill caused by personal information protection issues.