首页 PIPA介绍 申请指南 标准及管理制度 投诉与事故处理 参考资料 PIPA动态 通知 PIPA公示 PIPA认定企业情况 PIPA答疑
   经合组织(OECD)个人信息保护八大原则(1980年)
   中华人民共和国国家标准化指导性技术文件 GB/Z 28828-2012 信息安全技术公共及商用服务信息系统个人信息保护指南
   最高人民法院《关于审理利用信息网络侵害人身权益民事纠纷案件适用法律若干问题的规定》
   全国个人信息保护状况
   台湾个人信息保护法
   各国个人信息保护情况
  大连软件行业协会PIPA办公室
  咨询受理电话:0411-83655187
  传真:0411-83643362
  E-mail:PIPA@dsia.org.cn
  办公地址:大连高新技术产业园区七
    贤岭爱贤街10号大连设
    计城703室
当前位置 >>>  参考资料
经合组织(OECD)个人信息保护八大原则(1980年)

发布时间:2015-9-7 作者:PIPA管理办公室 点击次数:5534

经济合作与发展组织(Organisation for Economic Co-operation & Development),简称经合组织(OECD),是由34个市场经济国家组成的政府间国际经济组织,旨在共同应对全球化带来的经济、社会和政府治理等方面的挑战,并把握全球化带来的机遇。

以下是1980年9月23日经合组织通过的《个人数据保护和转移流通操作指南》( GUIDELINES GOVERNING THE PROTECTION OF PRIVACY AND TRANSBORDER FLOWS OF PERSONAL DATA)

Collection Limitation Principle
7. There should be limits to the collection of personal data and any such data should be obtained by lawful and fair means and, where appropriate, with the knowledge or consent of the data subject.

Data Quality Principle
8. Personal data should be relevant to the purposes for which they are to be used, and, to the extent necessary for those purposes, should be accurate, complete and kept up-to-date.

Purpose Specification Principle
9. The purposes for which personal data are collected should be specified not later than at the time of data collection and the subsequent use limited to the fulfilment of those purposes or such others as are not incompatible with those purposes and as are specified on each occasion of change of purpose.

Use Limitation Principle
10. Personal data should not be disclosed, made available or otherwise used for purposes other than those specified in accordance with Paragraph 9 except:
a) with the consent of the data subject; or b) by the authority of law.

Security Safeguards Principle
11. Personal data should be protected by reasonable security safeguards against such risks as loss or unauthorised access, destruction, use, modification or disclosure of data.

Openness Principle
12. There should be a general policy of openness about developments, practices and policies with respect to personal data. Means should be readily available of establishing the existence and nature of personal data, and the main purposes of their use, as well as the identity and usual residence of the data controller.

Individual Participation Principle

13. An individual should have the right:
a) to obtain from a data controller, or otherwise, confirmation of whether or not the data controller has data relating to him;
b) to have communicated to him, data relating to him within a reasonable time;  at a charge, if any, that is not excessive; in a reasonable manner; and in a form that is readily intelligible to him;
c) to be given reasons if a request made under subparagraphs(a) and (b) is denied, and to be able to challenge such denial; and
d) to challenge data relating to him and, if the challenge is successful to have the data erased, rectified, completed or amended.

Accountability Principle
14. A data controller should be accountable for complying with measures which give effect to the principles stated above.


原文请参考OECD网页:http://www.oecd.org/sti/ieconomy/oecdguidelinesontheprotectionofprivacyandtransborderflowsofpersonaldata