有关个人数据跨境传输更严格的规定A stricter regime for cross-border .PDF

March 2016 有关个人数据跨境传输更严格的规定 A stricter regime for cross-border transfer of personal data 最新的《欧盟数据保护条例》（2012/oo11/COD）要求 在挪威开展业务的跨国公司须审查内部合同以及内部规 The new EU General Data Protection Regulation (2012/0011/COD) implies that companies doing business in Norway should review their contracts and internal procedures. 修德 前言 INTRODUCTION 企业之间有很多数据传输包含个人数据，比如 Many data transfers between companies contain personal 当一个公司购买来自外部提供商的IT服务。此 data, typically when a company purchases IT services from an 外，跨国公司在集团内部不同国家的公司之间 external provider. Furthermore, international corporations 也每天都在交换员工数据。一些公司还可以通 are exchanging employee data between group companies in 过网站或在线应用程序收集客户数据。 different countries on a daily basis. Some companies may also collect customer data via web sites or online applications. 个人数据指可以直接或间接地与一个自然人关 Personal data is any information or assessment that can 联的任何信息或评估。关于员工或客户信息通 be linked, either directly or indirectly, to a physical person. 常会被视为个人数据。 Information about employees or customers will normally be considered as personal data. 处理个人数据的所有企业，都应当遵循数据保 护规则并应采取主动的保护方式来进行数据交 All companies that process personal data shall follow the data 换，尤其是在个人数据跨境传输时。 protection rules and should adopt a proactive approach to data exchange, especially when personal data cross borders.