The European Union's Adequacy Approach to Privacy and International Data Sharing in Health Research
The European Union's Adequacy Approach to Privacy and International Data Sharing in Health Research
复制标题
DOI：
10.1177/1073110516644205
复制
发表时间：
2016-03-01
影响因子：
2.1
通讯作者：
Joly, Yann
中科院分区：
文献类型：
--
作者：
Stoddart, Jennifer;Chan, Benny;Joly, Yann
欧盟（EU）的数据保护方法包括根据一系列原则评估特定司法管辖区的法律提供的数据保护是否充分，这些原则包括目的限制、透明度、质量、比例性、安全性、访问和纠正。欧盟的《数据保护指令》规定了向第三国转移数据的条件，禁止成员国向被认为数据保护制度不充分的国家转移数据。从理论上讲，每个司法管辖区都进行了类似的评估，必须完全符合欧盟的数据保护原则才能被认为是充分的。在实践中，这些评价的不一致性对国际数据共享构成障碍，并使不同数据共享方法难以整合;自该指令首次通过以来的20年里，只有五个欧盟以外国家的法律，经济区，或欧洲自由贸易协定被认为足以进行数据传输，而无需进一步的行政保障措施。
The European Union (EU) approach to data protection consists of assessing the adequacy of the data protection offered by the laws of a particular jurisdiction against a set of principles that includes purpose limitation, transparency, quality, proportionality, security, access, and rectification. The EU's Data Protection Directive sets conditions on the transfer of data to third countries by prohibiting Member States from transferring to such countries as have been deemed inadequate in terms of the data protection regimes. In theory, each jurisdiction is evaluated similarly and must be found fully compliant with the EU's data protection principles to be considered adequate. In practice, the inconsistency with which these evaluations are made presents a hurdle to international data-sharing and makes difficult the integration of different data-sharing approaches; in the 20 years since the Directive was first adopted, the laws of only five countries from outside of the EU, Economic Area, or the European Free Trade Agreement have been deemed adequate to engage in data transfers without the need for further administrative safeguards.