ivir\ti NunitiM u u u c i t BAO VE QUYEN 001 Vdi Dir UEU CA NHAN TRONG PHAP LUAT QUOC TE, PHAP LUAT MOT SO QUOC GIA VA GIA TRI THAM KHAO CHO VIET NAM Vu Cdng Giao* LS Tran Nhu-liiydn** • PGS.TS Khoa Luat, Oai hpc Quoc gia Ha Ngi * * ThS Khoa Luat, Oai hgc Qudc gia Ha Ngi Thdng tin bki viet: 7^ khda; KJ thu^l s6, quyen v^ sy rifng tu, quyen d6i vdi dG' li^u c^ nhin Ljch sii bdi viet; Nhlnbii 17/12/2019 Bien t$p 12/01/2020 Duy^t b&i 14/01/2020 Article Infomation: JCey words: Digital, right to privacy,rightto personal data Article History: Received : 17 Dec 2020 Edited : 12 Jan 2020 Approved : 14 Jan 2020 Tdm tfit: The ky XXI ghi dau mdt bude ngoat Idn Irong s\r phdt trien ciia nhan lo^i Day la the ky cua ky thu^t sd, noi ma nhiing tien bp ve cdng ngh? thdng tin, thiet bj ket ndi vdi Internet va phan tich dii lipu dang dien vdi tdc dd chdng mat, nhanh hon bat ky thdi diem ndo khic ljch su toai ngudi S\r phat then cua ky thuat sd da md mgt ky nguyen mdi cho khoa hpc cdng ngh?, li yeu to ddng vai trd cdt loi thuc day Cach m^g cdng nghi?p 4.0, vdi nhung tdc dpng v6 cung sau rpng tdi xa hgi, ^ thay ddi ldi sdng ciia ngudi Tuy nhien, s\r phdt trien cua ky thu^t ddng thdi gay nhiing tdc dpng c^c ky phuc t^p ddi vdi vi?c bao v? quyen ve suriengtu ciia ngudi, d$c bipt la quyen ddi vdi du Hpu ca nhan Bai viet phan tich su tdc dpng ciia ky thu^t sd den quyen ddi vdi du lipu ca nhan; danh gia cdc quy djnh ctia phdp luat quoc te va phap luat d mpt so qudc gia ve vipc bao vp quyen bdi cdnh mdi va neu mpt sd gid trj md Vipt Nam cd the tham khao Abstract: The 20th century marked a major turning point in the development of mankind This is the century of digital, where advances in communicatioo technologies, devices connected to the Internet and data analytics are occurring at a breakneck pace and much quicker than at any other time in history The grovrth of digital has resulted in broad social impacts and widespread lifestyle changes, and it has opened up a new era of science and technology development, contributing to the promoting the 4.0 Eevolution However, die digital also pose mcredibly complex risks to the right to privacy, especially the right to the protection of personal data This article analyzes the impact of digital on the right to the protection of personal data; assess the provisions on protecting this right of international law and the laws of some countries in the new context and point out some values that Vietnam should consult ^ NOHltN Cini I cc S6 9(409) - T5/2020>^ L A P PHAP "*' MNH NGHIEM QUOC Tt Quyen doi vdi dir U|u cd nhan Cdch mang cong nghi&p 4.0 Quydn doi vai du li?u ca nhan (the right to personal data, hay quydn bao ve dir li?u ca nhan/quydn vd suridngtir vai dii ii^u ca nhan) la mpt ph§n c6i yeu ciia quydn \d sy rien| tu {therightto privacy) cua nguoi Quyen vd s\j ridng nx la mpt quyen nguoi CO ban, co tim quan trgng thiet ydu dd bao dam si^ tv chii va bao v$ pham gia ciia nguoi Quydn giiip moi ca nhan tgo l^p v^ kidm soat ranh gioi chinh dang vcri nhung ngucri khac, tir bao v^ ban than tru6c nhirng s\j can thi?p liiy li?n cupc song, dong thai cho phep moi ca nhan xac djnh minh la va each thuc ma ban than muon tuong tac voi thd gioi xung quanh Doi vdi xa hpi, bao v? quydn vd s\rridngtu cua moi th^mh vidn ciing chinh la tao lap va b^o v? ndn tang ciia dai song cpng ddng Mpl cpng dong khong thd ton tai ndu cac vidn ciia no khong dupc bao v? khoi nhirng hinh thuc \^m d\mg Theo nghia do, bdo v? ^uydn vd s\rriengtu ciia m6i ca nhan g6p phan bao dam linh dan chu, van minh vh sv phal trien on dinh, hai hoa ciia xa hpi Vi the, quydn vd si/ridnglu n^ay da tro mpt nhimg van dd nhan quydn quan trpng Dii ii?u la ydu to dong vai tro then chdt cho sv tien bp ciia thoi dai Didu d\ra trdn sy phat iridn ciia cac cong ngh? luu tm va cac lo^i cam bien ma no cho phep thu thgp mpl kh6i lupng dii li?u lon tir doi song xa hpi Tuy nhien didu ciing dat ydu cau phai bao dam dd mpi ngucri c6 thd kidm scat thong tin hay dii li$u ca nhan ciia minh Do do, thuat ngir dir li?u ca nhan dugc ghi nhan va trcr nen bidn khoa hpc phap ly Theo Uy ban chau Au, dit li?u ' inhan la bat ky thong tin nao c6 lidn quan nham xie djnh ho§c nhjin dgng mgl ca nhfin Ben cgnh do, nhung ph4n thong tin rcri rgc khac ndu dugc thu th|p c6 thd dan den vi?c xdc djnh mpt ngu&i cy thd cflng dupc coi la dii ii?u ca nhan' Quydn d6i voi du li|U ca nhan bao g6m cdc khia cgnh^: i) Quyen dugc sd hun nhung thong lin cd nhan, bao gom kha nang ydu cSu chii thd nSm giii chinh sua nhdm bao dam tinh todn v^n, chinh xdc ciia thdng tin ca nhan cua minh; ii) Quyen cho phep bdn thu ba tiep c ^ thdng tin cd nhan ciia minh; iii) Quydn yeu cau cdc chii the cd lien quan phai bao dam tinh bi mdt cua thdng tin, vi dy nhu vd danh hda thdng tin cd nhan, ; iv) Quydn ydu cau chii thd nSm giii bdi thudng cd hanh vi xam pham thdng tin trdi phap lugt, gay thi?t hgi cho cd nhan Cling vdi su phdt trien cua Cdch mgng cdng nghipp 4.0, diJ lipu cd nhan ngdy da trd mdt loai hang hod, dupc cdc to chirc, cd nhan tim kiem, sii dyng de khai thdc cho muc dich thucmg mai, ddng thdi dugc cdc nha nucrc six dung vdi muc dich qudn 1^ ngudi dan Trong bdi canh cdng nghp thdng tin phdt tridn, cang cd nhidu chuang trinh, he thdng, bipn phap thu thgp thong tin, theo ddi, gidm sdt cd nhan tren didn rpng, d cap dp qudc gia, tham chi trdn quy md toan cau Van dd la cd rat nhidu chucmg trinh, hp thdng nhu vay dang dupc chinh cdc ca quan nha nude, cdc thyc the kinh te, thuang mai, cdng nghd va mpt sd thyc thd khdc xay dyng va van hanh Iran lan, xam phgm nghidm trpng ddn quydn vd sy ridng tu ciia cdc cd nhan Mpt nhiing vy vipc tidu bidu gay chdn dpng lidn quan ddn vipc thu thap va luu European Commission, "What is personal data?", https://ec.europa.eu/info/law/law-topic/dataPTotection/reform /whal-personal-data_en : PGS.TS.NGUT Chu Hong Thanh "Nhdn thuc phap ly ve quyk rieng nr", PGS.TS Nguyin Th' n '• Anh, PGS.TS VQ Cdng Giao, TS Ngd Minh Huong& TS LS Khdnh Timg (eds), Quy6n ve= ssu rieng tu \ \ b Chinh tq quoc gia s\r Ui^I, Ha Npi, 2018, tr 48 CC I NOHltN CUU I *'*' I A P P H A P _ / S d 9(409)-T5/2020 KINH NGHIEM QUOC TE tru dii lipu ca nhan trdi phep da dugc tiet Ip bdi Edward Snowden, mpl nhan vien hpp ddng tgi Co quan Thih bdo Tnmg uong Hoa Ky (CIA), Ca quan An ninh qudc gia (NSA) ciia Hoa Ky da tgo lap mdt ca sd du Ii?u bi mgt khong lo chiia thdng tin vd hdng tripu ngudi song d mpi nai tu vide thu thgp thdng tin qua cdng nghp may tinh Rd rang cong nghp da tgo ca hdi cho nhieu chii the, bao gom cdc chinh phu va cdc cong ty, de dang thu thgp dii li?u va theo doi, gidm sdt cdc cupc ddm thogi, trao ddi, cdc giao djch thuang mgi, cdc hogt dpng vd thdi quen cua mpi cd nhan Sy rieng tu ciia cd nhan, thgm chi la quyen ty ciia ngudi, se khdng cdn niia cdc chii the khac cd the quan sdt tat cd cdc hogt dgng cua hg, dy bdo cdc hdnh dpng tuong lai cua hp va tu dd dinh hirdng, kiem sodt cupc sdng ciia hg Didu cd the lam tram trgng han sy mat can bang quyen lyc giiia cd nhan va cdc thidt chd, cd thidl che cdng va tu, xa hgi hipn dgi Phap Inat quoc te va mpt so quoc gia v^ bao vf qay^n doi vol dir lifu cd nhan 2.1 Phdp lugt quoc te ve bdo vp quyen doi vdi dir lipu cd nhdn cap dp todn cau, cdc quy dinh ve bao vp quydn vd syriengtu cd the dugc tim thay Tuyen ngdn Nhan quydn phd qudt nam 1948 (UDHR), dd cd Dieu 12 vd bdo vp quydn vd sy ridng tu Tu ngi dung Dieu 12 UDHR, cd thd thay npi ham ciia cdc gid tri ridng tu can dupc bao ve khdng chi la cugc sdngridngtu cua mdi ca nhan, ma cdn bao gdm ca nhiing khia cgnh ddi song cd sy gan ket mat thidt vdi ca nhan, cy the nhu gia dinh, noi d, thu tin va cd nhiing gid trj dinh tinh nhu danh dy, uy tin ca nhan Tiep theo UDHR, nhidu cdng udc qudc te vd quydn ngudi cung cdng nhgn quyen vd syridngtu nhu mgl quyen co bdn, cy the nhu: Cdng udc qudc td ve cdc quyen dan su va chinh tri (ICCPR) (Dieu 17); Cdng udc ve quydn cua ngudi lao dpng nhgp cu Tdm lgi, quydn vd dir lipu cd nhan ndi (Didu 14); Cong udc vd quydn tre em (Didu rieng, quyen ve syridngtu ndi chung la mOt 16); Cdng udc vd quydn ciia ngudi khuyet quyen ngudi cd y nghia to ldn de cdc cd tat (Didu 22) nhan cd the khang dinh pham gid, sy ty chii Dii vgy, sy phat tridn cua cdng nghp va nhdn trgng cua minh Cdng nghp thdng cudc Cdch mang cdng nghi?p 4.0 md lin vdi kha nang thu thgp, phan tich va di kem vdi nd la tidm nang giam sdt ngdy bien dir lipu ve cdc cd nhan ngdy cang tinh cdng tinh vi ciia cdc he thdng may tinh da dgt vi da dgt nhu cau cap bdch vd bao vd nhirng yeu cau mdi vdi bao vp dfl- lipu ciia quydn vdi dir hdu cd nhan ndiridngva quyen ca nhan B% dap ung ydu cau nay, cd hai ve sy rieng tu ndi chung Cdc td chiic qudc cdng cu phap ly qudc td da dugc phdt trien, le va cac qudc gia can nhgn thuc duac thdch dd dat mdt so quy tac cu thd chi phoi thlic to ldn sy phdt tridn ciia Cach vide thu thgp va xir ly dii lidu cd nhan, bao mgng cdng nghd 4.0 d% cd bipn phap giai gdm: Cdng udc nam 1981 cua H^i ddng quyet hipu qua, cy thd Id ban hanh nhimg chau Au ve bdo vd cd nhan lidn quan den chinh sdch va van ban phap luat nham bdo vide xii ly dii lieu cd nhan ty dOng^ va v? dii lipu cd nhdn trudc su vi phgm ciia bat Hudng dan ciia Td chiic Hap tdc va Phdt ky chii the nao, ke ca cac ca quan cdng tridn Kmh Id (OSCD) didu chinh vipc bao vp quydn va cdc thiet che tu nhan quyen vd sy ridng tu va vipc chuyen doi dii Convention on the Protection of Individuals with regard to the Automatic Processing of Personal Data Convention ETS No 108, Stasbourg 1981 NGHltN Ciru I e** sd 9(409) - T5/202o\ L A P PH A P KINH NGHIEM QUOC I E Tuy nhien, cd thd ndi rdng lugt phdp quoc te hipn van cdn tucmg doi tyt h^u so vdi sy phdt tridn nhu vfl bao ciia cdng nghp Dieu da khidn cho vipc bdo v? quyen doi vdi du lipu cd nhan cua ngudi thyc id cdn rat khd khan Tmh ddn thdi didm hi§n nay, van chua cd didu udc qudc te loan cdu nao vd bao vp quydn ddi vdi dii lipu cd nhan Hai van kipn vd bdo v? dii lipu cd nhan da ndu trdn (Cong udc ciia Hgi ddng chau Au nam 1981 va Hudng dan ciia OECD) vd nguyen tic chi cd lac dpng yong khu vyc chau Au va vdi cdc nude vien cua OECD Khdng chi vay, Bdn hudng dan ciia OECD chi cd tinh chat khuydn nghj, khdng cd hipu lyc phdp ly rang bupc qudc gia da ciing cd khung phdp lugt ve van de M§c dii vgy, moi khu vyc vd quoc gia cd nhiing each thiic bdo v^ du- lipuridngtu khac Mgl so khu vyc va gudc gia da xay dyng cdng mgt ca che bdo v? dir li$uridngtu mgnh me thdng qua lugt phdp, nhieu khu vyc va qudc gia khdc mdi dan^ ldn kd hogch xay dyng phdp lugt ve van de 2.2.1 Lugt bdo vp die lipu cd nhdn & chdu Au Quydn vd sy ridng tu la mgt phan ciia Cdng udc chau Au vd quyen ngudi nam 1950, dd tuydn bo, mpi ngudi d^u cd quyen dupc ldn trgngridngtu va cugc song gia dinh, nhd d va thu tii Tii ca sd dd, cdc nude Lien minh chau Au (EU) da tim cdch ddm bdo quyen thdng qua vi^c xdy dyng mgl vdn bdn phdp lugt chung, dgc bi^t Intemel xuat hipn Vao nam 1995, EU da thdng qua Chi thi ve bdo vp du lipu chau Au (95/46/EC), thiet lgp cdc tieu chuan bdo mgl varidngtu dii Hpu tdi thidu de cdc quoc gia thdnh vidn thyc thi bdng cdch dua vdo phap lual ciia nude mmh Tuy nhidn, Chi thj ndm 1995 dugc soan thdo vao giai dogn Internet mdi chi dupc su dyng bdi 1% dan sd the gidi Vi vgy, Internet biing no, xual hipn yeu cdu phai cd van ban phdp ludt mdi dd giai quyel cdc van dd ndy sinh vd bao V? du lipu ca nhdn hi vipc sii dyng Internet vd cdc thidt bj^thdng minh tren quy md ldn Day la ly dan den sy ddi ciia Quy dinh chung ve bdo vp du lipu (GDPR) Uy ban chau Au xay dyng, vdi myc dich vgch kd hogch cdi cdch bdo v? dii li?u cd nhdn tren toan Lidn minh chdu Au 2.2 Phdp lugt cda chdu Au vd Hoa Ky ve bdo vp quyen doi vdi dir lipu cd nhan Dling trudc ydu cau bdo vp quydn vd sy ridng tu trudc ldc dg phal tridn chdng mgt ciia cdng nghp thdng tm, nhieu khu vyc va Ve bdn chdt, GDPR Id mpt bp quy tdc mdi, dugc xay dyng nhdm cune cdp cho cdng dan EU quyen kidm sodt nhieu han ddi vdi dir lipu cd nhdn ciia hp Theo cdc didu khodn cua GDPR, khdng chi cdc id chuc lipu ca nhan xuydn bidn gidi^ Cdc van kien md la thdng tin cd nhan Id dir lipu dugc bao \d d mpi bude, tir thu thgp den luu tru va phd bidn Quyen ciia mpi ngudi du^rc truy cgp va sua ddi dir lieu ciia minh cung la mgt khia cgnh chinh cua cac quy tac Bieu hipn cua sy bao vp dir Hpu hai van kipn da ndu CO ban la tuang ddng, chi khac d muc dp, theo dd tat cd deu ydu cau ddi vdi thdng tin ca nhan thi: i) Chi cd thd dugc thu thgp mpt each cdng bdng va hgp phap; ii) Chi dugc sir dyng cho myc dich ban dau dugc bidl rd; iii) Bao dam tinh day dii, phu hpp va khdng vugt qua myc dich; iv) Bdo ddm tinh chinh xdc va cap nhgt; va v) Phai dugc logi bd sau myc dich su dyng da hodn thdnh Hai vdn kipn ndu trdn da cd lac dpng sau sdc ddn vipc xay dyng vd dp dyng iugl phap ve bdo vp dii lipu cd nhan trdn loan the gidi, khdng gidi hgn d cdc nude chau Au vd cdc quoc gia vidn cua OECD OECD, Guidehnes govemmg the Protection of Privacy and TransbordcrDataFlowsof Personal Data, Paris IQRi CUU / M l LHSHItH A P P H A P _ / S A 9(409)-15/2020 KINH NGHIEM QUOC TE phdi ddm bdo dii lipu ca nhan dugc thu thgp hgp phap vd cdc dieu kien nghidm ng$t, ma tat cd nhiing bdn thu t h ^ va qudn ly dir lipu cd nghia vy bdo vp dii lipu khdi vipc bi Igrn dyng vd khai thac, cung nhu ldn trpng quyen ciia chii sd hihi dii lieu Tien phgt doi vdi hdnh vi trdi vdi quy djnh cua GDPR rat cao Theo dd cd hai cdch thuc phgt, cd the ldi da la 20 tripu Euro hogc 4% doanh thu toan cau (tdy theo miic ndo cao hon), cgng vdi vipc cdc chu thd du- lieu cd quyen ydu cau boi thudng thipt hgi GDPR cung la mgt bude tidn phap ly ldn vd xdc dinh du' lipu cd nhan Dii lipu cd nhan va dii lipu cd nhan nhgy cdm la hai khdi nifm n^n tdng ciia GDPR DO; lipu cd nhdn dugc djnh nghTa Id "bat ky thdng tin nao lidn quan ddn mgt thd nhan ('data subject') da dugc nhgn djnh danh linh, hogc cd thd dugc nhgn djnh danh tinh, dii tryc tidp hay gian ti^p, cy th^ Id bdng cdch chi mpt djnh danh nhu ten, so dinh danh, dii lipu vj tri, dinh danh trdn mgng, hay mOt hoac nhidu ydu td chi dinh danh linh cua mgl ca nhan mang tinh vgt ly, sinh ly, di truydn, tdm ly, kinh Id, vdn hod, hogc xa hOi" Dinh nghia kha tuang ddng vdi djnh nghia dugc duaratrong Chi lhi ndm 1995 ciia EU, nhung cd sy md rpng han, bao gom cd "dja chi IP" hay "gid danh tinh" (pseudonymisation) Du' lipu cd nhan nhgy cam dugc quy djnh dudi dang hgng myc dii li?u cd nhan d$c bipt GDPR, dupc xem la: "Bdt ky dir lipu ndo tidt Ig chung tpc hogc sac tpc, tu tudng chinh tri, diic tin tdn gido, quan nipm triet ly, thdnh vidn cdng doan, va vipc xu ly du lipu di truyen va sinh trac nham myc dich djnh danh, hogc dii lipu lidn quan ddn siic khod, tinh trang sinh dye, va xu hudng tinh dyc"^ Vipc xu ly va phan tich cdc du lipu nhgy cdm hoan todn bi cim bdi GDPR Mgt sd trudng hgp ngogi Ip cho phep xir ly du Upu cd nhan nhgy cam, bao gdm cd sy ddng thuan tu chii the dii hpu, de bdo ve quydn lpi cd nhan, dd phuc vu cdng tdc y td dy phdng va y td nghiep vy, hoac vi lpi ich cdng cgng Xet trdn nhung didu kipn do, vide Facebook hogc Google ciing cac ddi tdc kinh doanh thu thap va xii ly cdc dtr lipu cd nhdn nhgy cdm cd kha nang vi pham GDPR rdt cao Trong nhiing tinh hudng vi phgm, GDPR cho phep cdc ca nhan cd quydn npp don khieu ngi den Ca quan Quan Iy Du^ lipu dat lgi cdc qudc gia thdnh vidn ncri cd nhan dang ldm vipc ho^c sinh sdng, hoac noi vipc vi phgm da dien Cac cd nhdn sau dugc thdm djnh quydn bi xam hgi se dugc xir ly ddn bu theo quyet djnh cua Co quan Qudn ly Dii hdu, theo tinh thdn cua nhiing quydt dinh dua bdi Hpi ddng Bdo vp Du lipu chau Au (EDPB) Tinh ddn thang 5/2019, khoan tidn phgt ldn nhat dp dyng theo GDPR Id 50 tripu Euro Vi dy, Co quan giam sat bao vp dii lipu ciia Phdp (CNIL), da quydl dinh an phgt cho Google vao thang 1/2019 sau di ddn ket ludn rang ga khdng Id cong cy tim kiem da phd vd cdc quy ldc ciia GDPR vd linh minh bgch va ca sd phdp ly hpp Ip xit iy du: lipu ciia mpi ngudi cho muc dich qudng cao^ GDPR thidt lap nguyen tdc cdn tuan thu xir ly dii lieu: 1) Tinh hgp phdp, cdng bang va minh bach: Vipc xii Iy dii lipu phdi hpp phdp, cdng bang va minh bgch ddi vdi chii the du- lieu; 2) Gidi han myc dich: Muc dich xu ly dii lieu phai hgp phap va duac the hien ro rdng cho chii thd dii Ii?u thu thdp; 3) Giam thidu dii hdu: Chi thu thap vd xii ly dii lieu thuc sy can thidt cho cac myc dich da dinh; 4) Dp chinh xac: Phdi bdo dam du lieu cd nhan la chinh xac va cap nhal; 5) Khoan Dieu Quy dtnh chung ve bao v? dii li?u cua Lien minh chau Au Danny Palmer, "What is GDPR? Everything you need to know about the new general data protection regulations", 2019, https://www.zdnet.com/article/gdpr-an-executive-guide-to-what-you-need-to-know/ HGHltH CVU I CQ S6 9(409)-T5/202O\_LAP P H A P KINH NGHIEM QUOC TE Gidi hgn luu trix: Chi luu tru du hpu nhgn dgng cd nhan thdi gian can thidt cho myc dich da dinh; 6) Tinh loan ven va bao mgl: Vipc xii ly dii lipu phdi dupc thyc hipn tren ca sd ddm bao tinh bdo mgt, tinh todn vpn va bdo mgt thich hgp (vi dy: bang each su- dyng ma hda); 7) Trdch nhipm giai trinh: Ngudi kiem sodt du lipu cd trach nhipm chiing mmh sy tudn thii GDPR vdi tat cd cac nguydn tac GDPR cung quy djnh "quydn dugc lang quen" - cy thd la quyen xda du lipu cho nhflng ngudi muon xda dir lipu cd nhan cua hp khdng cdn cdn eii de luu giu' dii lipu dd GDPR dugc dp dyng d cap dp nude vdi hi?u lyc lgp tiic, bat dau lu ngdy nd cd hipu lyc va vipc dp dyng ludt quoc gia se khdng anh hudng ddn hipu lyc cua nd Tuy nhidn, GDPR cho phep cdc qudc gia thdnh vidn sy linh hogt ddn mpt miic dp nhdt djnh dp dyng mgt sd quy dinh Trong thyc te, edc nude thdnh vidn EU dd siia ddi iugl bdo vp dii lipu ciia hg de tuan thii cdc yeu cau GDPR Vi dy, Phap da didu chinh lugt phdp nude minh theo GDPR vdi vipc ban hdnh Lugt so 2018-493 (FDPA) ngdy 20/6/2018 ve bdo v? du lipu cd nhdn, dd thay thd logic ciia cac thii tyc trudc dd (thong bdo hoac uy quydn trudc bdi CNIL) dya trdn tridt ly ve trdch nhidm gidi trinh ndng cao cua cac bdn lidn quan GDPR Nude Anh ciing da thdng qua Luat Bao V? du lipu qude gia mdi (DPA) cd hieu lyc vdo ngdy 25'5'2018, dd cho phep tidp tyc dp dung GDPR ke ca nude rdi Lidn minh chau Au DPA chuydn ddi Chi thi thyc lhi phap luat ((EU) 2016/680) lugt phap eua Vuang qude Anh, tao mdt che dp bao v^ du lipu ddnhridngcho vide xii ly du lipu cd nhdn ciia co quan thyc thi phap lugt, yong dd Phan cua DPA cap nhal che dp bdo vp du lipu dd xii ly an ninh qudc gia; cdc Phan va dua phgm vi nhipni vy va quyen hgn ciia Uy vien Thdng tin, dong quy dinh mpt sd lgi hinh sy lidn quan den xu Iy dQ- lipu cd nhdn 2.2.2 Ludt Bdo xp dik lipu cd nhdn a HoaKy Cho den nay, Hoa Ky ehua co bat ky dgo lugt ridng nao d cap lidn bang ve bdo vp du li?u cd nhan, song van dd ndy da dugc neu nhieu van bdn phap lugt ban hanh theo tung nganh, hing ddi mpng Vi dy: Lugt Bdo vp quyen vd syridngm tryc tuyen ciia trd em (COPPA) - eung cap cho phy huynh quyen kidm sodt doi vdi nhung thdng tin md cdc trang web cd thd thu thgp tii cdi hg; Lugt v^ Trdch nhipm gidi trinh va trdch nhipm bdo hiem y te (HIPPA) - ddm bdo tinh bdo mgt ciia bpnh nhan doi vdi tat ca cdc dii li?u lien quan den cham sdc siie khde; LuSt Bdo v? quyen vd sy rieng tu video - ngan chan vipc tiet Id sai thdng tin ciia mgt cd nhan xuat phdt tii vipc cho thud hogc mua tdi lipu nghe nhin cua hg Theo cdch tidp can ciia Hoa Ky, vipc bdo vd dii lieu va quyen ve sy rieng tu dugc dya trdn sy ket hgp giua luat phdp, quy dinh va ty dieu ehinh, thay vi chi cd sy can thipp cua nhd nude' Phdp ludt thudng chi dugc dp dyng cho cac tinh hudng cdc cd nhan khdng thd ty kiem sodt vi^c sir dyng du' lipu cd nhan ciia hg Sau GDPR dupc thdng qua, mgt s6 tidu bang cua Hoa Ky da de xuat luat bdo vp du' li?u cua rieng hg, thidt lap mpt so quy^ gidng nhu GDPR Ludt vd Sy ridng tu cua ngudi tieu dimg ciia bang California (CCPA) dugc thdng qua vdo thdng 6/2018 sau vu be bdi Cambridge Analytica^ dy kidn se trd lugt vd quydn vd sy rieng lu dii lieu todn dipn nhat d Hoa Ky Giong nhu GDPR, van bdn lugt thidt lap mpi so quygn nhdt djnh cho ngudi tidu dimg, bao g6ni "quygn HG.org, "'Data Protection Law", hrtps://www.hg.org/data-protection.html I O lHOHIlHCinJ L A P P H A P _ / S 9(409)-T5f2020 KINH NGHIEM QUOC T t dupc bidt", "quydn dugc tiep cgn", "quydn hi choi" vd "quydn xda bd" Ngodi ra, CCPA md Fpng ddng ke dyih nghia vd thdng tin cd nhan, tCr dd ddi hdi cdc cdng ty phdi cd nhung thay ddi ddng kd cdch thiic hogt dpng cua minh Van bdn luat nay, khdng giong nhu bat ky lugt bdo vf du' lipu ndo dupc ban hdnh trudc day d Hoa Ky, ydu cau cd mpt lya chgn tren trang web cua cdng ty de cho phdp ngudi tieu diing tu chdi chia se dir lipu cho ben thii ba Van bdn ludt cflng cho phep quyen hdnh dgng rieng tu trudng hpp vi phgm dir lipu va cho phdp Bg trudng Tu phdp California dp dyng cdc hinh phgt hdnh chinh len tdi 7.500 dd la cho moi Ian vi phgm md khdng cd gidi hgn ihi da Khdng chl California, 11 bang khac cua Hoa Ky bao gom Maryland, New Jersey va Washington gan ddy da dua dy thdo vdn bdn phdp lugt tucmg ty Nhirng dy lugt cd cdc phien bdn ridng ve quyen tir choi vd cdc ydu c4u cdng bo md khdc mgt chut so vdi GDPR va CCPA Neu dugc ban hdnh, cdc lugt ndy se din den tang chi phi ddng kd cho cdc doanh nghipp phdi cd gang hidu vd dua mgt khung bdo mgt tuan thii cae quy dinh ciia ciia luat Trdn thyc td, mirc dp phiic tap vd khdng chic chan nhimg thay ddi vd khung phdp ly dang khien edc doanh nghipp kdu gpi Quoc hgi Hoa Ky ban hdnh vd thyc thi lugt bao mgt dir lipu ca nhan dp dyng eho todn qudc Ddp iing ldi kdu ggi do, Qudc hdi Hoa Ky da dua mgl sd dy lugt ve quydn vd sy ridng tu du lipu dd thyc hipn lidu chuan bdo mgt du lipu lien bang tgi Hoa Ky Vi du, Lugt Phd bien Dii lieu Hoa Ky (S 142) se dp dat cac ydu cau vd quyen ve sy ridng tu ddi vdi cac nha cung cap dich vy Internet tuang ty nhu cac ydu cau dp dat cho cdc ca quan Lien bang theo Lugt ve quydn vd syridngtu nam 1974 Lugt bdo ve quydn vd sy rieng tu va quydn lgi ngudi tieu diing trdn phucmg tipn truydn thdng xa hpi nam 2019 (S 189), se yeu cau cdc chii thd: I) cung cap cho ngudi dung mpt ban mien phi dudi dgng dipn tii nhirng du lipu ed nhan md nhd didu hanh da xu ly vd 2) thdng bao eho ngudi diing vdng 72 gid sau biet rang du- lipu ciia ngudi diing da hi truydn di ma vi phgm ndn tdng bdo mgt' Tdm lgi, tnrdc nhung tdc dOng cua cugc Cdch mgng cdng nghipp 4.0, nhidu khu vyc vd quoc gia da cd nhiing dOng thdi tich cyc va hipu qud ve mgt lap phdp de bdo vp quydn vd sy ridng tu dii hpu eiia cd nhan Day la mgt xu hudng chung tren the gidi ma tat cd ede nude, dd ed Viet Nam Nhirng gid trj tham khao cho Vi^t Nam 3.1 Khdi qudt thf/rc trgng phdp lugt Vipt Nam ve bdo vp quyen doi vdi dit lipu cd nhan Vdn de bdo vp cdc gid trjriengtu ca bdn cua mpt ca nhan da dupc ghi nhan tii nude Viet Nam Dan chu Cgng hda dupc lap, ma the hipn ndi bat d quy djnh vd quyin duprc bdo vi nhd a vd thu tin Didu thii 11 cua Hidn phdp nam nam 1946 Xuydn sudt cdc ban hidn phdp tidp theo (1959, 1980, 1992) deu cd quy dinh v^ bao vd quydn vd syridngtu, dii cdch dien dgt va ndi dung it nhieu khac Hien phdp nam 2013 tidp tuc ghi nhan quyen vd sy rieng tu ciia cd nhan nhung md rgng, bdm sdt hem ngi dung quyen luat nhan quydn qudc Wikipedia, "Facebook-Cambridge Analytica data scandal", https://en.wikipedia.org/wiki/ Facebook'''oE2%80%93 Cambridge_AQalytica_data_scandal U.S GAO, "Report: INTERNET PRIVACY: Additional Federal Authority Could Enhance Consumer Protection and Provide Flexibility", 2019, GAO-19-52 NGHltH cuu I e i S6 9(409) - T5/202o\_ L A P P H A P KINH NGHIEM QUOC TE te Theo quy djnh lai Dieu 21 Hidn phap nam 2013, mpi ngudi cd quyen bat khd xam phgm vd ddi sdngridngtu, dd bao gdm cd bi mgt cd nhdn, bi mat gia dinh, bi mat thu tin, dipn thoai, dipn tin va cdc hinh thire trao ddi thdng tinridngm khdc Nhin chung, khdi nipm ddi sdng ridng tu Didu 21 Hidn phdp 2013 dupe hidu theo nghia rpng, bao gdm tdt ea nhflng gi gdn vdi danh dy, uy tin ciia mpt cd nhdn Ddy la cdch quy dinh rpng va chi lidt han so vdi quy dinh vd quyen cac bdn Hien phdp trudc dd Khdng chi vgy, Didu 22 Hidn phap nam 2013 cdn quy djnh quydn bdt khd xam phgm vd chd d, dong thai ndu rd "Khdng dupe tu y vdo cho d ciia ngudi khde ndu khdng dugc ngudi dd ddng y", "Vipc khdm xet chd d lual djnh" Nhflng quy dinh ndy ciing chinh la de bao V? quydn vd syridngUr Trong no lyc tdng cudng khung ph^ •y vd quyen ve sy rieng tu thdng tin, Vift N da ban hanh Lugt An loan thdng tin mgng nam 2015 Lugt neu dinh nghia thong^tin ed nhan, cdc nguydn tdc bao \"P quyen ve sy ridng tu du lipu, quy dinh vd thu Uigp, su dyng, sua ddi, xda thong tin cd nhan cung vdi trdch nhipm cua chinh phu vi^c bdo vp du lipu ridng tu Tuong Ur nhu cdc van bdn phdp iugl da ndu trdn, Lugt An todn thdng tin mgng cung ydu cau can cd sy dong y eua chu sd hihi tnrdc xir ly thdng tm cd nhan (bao gdm thu thgp, chinh siia, sii dyne, Iuu tru, cung cap, chia sd hogc lan truyen), d6ng thdi quy dinh to chiic, cd nhan xu ly thdng tin ed nhan cd Hich nhi^m bdo mat thdng tin va phai cdng bd chinh sdch sir dyng vd bdo vp thdng tin dugc xii Iy"* Luat An ninh mang nam 2018 lan dku tidn yeu cdu cdc doanh nghiep cung cap djch vu trdn khdng gian mgng tai Vipt Nam phdi thdng bdo tryc tidp cho ngudi dung ndu du lieu ciia hg bi vi phgm, bi hu hdng hoac bj mdt" Quy dinh tucmg ddng vdi cdc ydu cdu dat GDPR ciia Lien minh chdu Au Tuy nhidn, xet chung, Lu^it An ninh mgng 2018 khdng giong cdc luat tuang ty d Du vgy, Vipt Nam hipn chua cd mpt chdu Au va Hoa Ky, ma cd nhidu di^m van bdn phdp Iugl thong nhat dieu chinh cdc tuang ddiig vdi Luat An ninh mgng cua Trung Qudc, thd hien d vide chii ydu nhdm van de lidn quan va bdo v? quydn vd dii lieu tang cudng kha nang cua nha nude cd nhan Thay vao dd, quyen dupc bao vipc kidm sodt ludng thdng tin va bao vp cdc vp bdi nhidu van bdn phap lugt khae nhu Lugt Giao dich didn hi, Lual Cdng nghp ca sd tdng thdng tin quan trgng thdng tin Lugt Bdo ve quydn lpi Ngudi tidu Tdm lgi, cd thd thay rang, ciing vdi Hidn dling Lugt An loan thdng tin mang, Luat An phdp, he thdng phdp luat cita Vi^t Nam hien ninh mgng, Nghi dinh sd 52/2013/ND-CP vd da xac lap ndn tang phap ly ban ddu dd bdo thuang mai dien tii va Nghi dinh sd vp quydn vd sy rieng tu, bao gdm 72/2013/ND-CP vd qudn ly, cung cdp va su^ quydn vd dir lipu cd nhan trdn nhidu ITnh vyc dyng djch \'y Intemel va thdng lin trdn Tuy nhidn, trude anh hudng sau rpng cua mgng cupc Cdch mgng cdng nghipp 4.0 hipn Vipc bdo vp quydn vd sy ridng tu ndi chung d Vipt Nam cdn dupc cy the hod nhieu dgo lugt chuyen ngdnh khdc nhau, phy thugc vao bdn chat cua tung van dd, vi du nhu Bg Iugl Dan sy, Bg lugt Hinh sy, Bg luat To tyng hinh sy, Bg lual To tyng dan sy, Lugt Buu chinh, Lugt Vien thdng, Ludt Xudt ban, Lugt Phdng, chdng HIV/AIDS 10 Dicu 17 Lu?tAntoan thong tm mang 2015 11 Di^mc khoan l , D i ^ u Lu^t An mnh m^ng nam 2018 COU f 62 NaHltH L A P P H A P _ / S4 9|«B) - TS2020 KINH NGHIEM QUOC TE so vdi cdc quy dinh cua phdp lugt qudc Id vd phap lugt d nhidu quoc gia, phap ludt Viet Nam linh vyc ndy van cdn mpt sd han che, cy the nhu sau: Thii nhdt, khung phap ly vdn cdn thieu cdc vdn ban ridng va quy dinh cu thd vd quydn ve syriengtu dii li?u vd bdo ve thdng tin cd nhan Thii hai, mgt sd quy djnh eiia phdp lugt hipn hdnh vd bdo vp quydn ddi vdi du lipu cd nhdn cdn thieu rd rdng, ngng vd nguydn tdc, cd thd dan den hidu va dp dyng sai Thii ba, cdc quy djnh ve che tdi vdi nhirag hdnh vi vi phgm quyen vdi du lipu cd nhSn c6n chua tuang xiing, chua ddm bdo tinh rdn de Mirc phat tidn ngng nhat ddi vdi vi phgm quyen vd syriengtu phap lugt hanh chinh cua Vipt Nam hipn Id 70 trieu dong (Didu 66 Nghj djnh sd 174/2013/NDCP), phdp lugt hinh su Id 200 tridu ddng (Dieu 288 Bg luat Hinh sy 2015, siia doi, bd sung nam 2017) Trong dd, nhu da dd cgp, GDPR dp dyng miic phat ldn tdi 20 h-ipu Euro (tuang duong 500 ty VND) Tir sy so sdnh ndy, cd the thdy miic phgt lugt phdp Vipt Nam cdn qud nhe so vdi miie dp nguy hgi vd hgu qud cua hdnh vi xam phgm quydn quydn vd sy rieng tu, dgc bipt la bao vp du' lieu cd nhan Hoa Ky ciing dang xay dyng nhimg dgo lugt lidn bang rieng vd van dd Trong dd, quy dinh vd bdo vp quyen vd dii lipu cd nhan d Vipt Nam hipn van ndm rdi rdc d nhidu van bdn phap lual khdc nhau, dan ddn tmh trgng vira chdng cheo, vu'a thidu thdng nhal va khd khan cho vide dp dyng phap lual Vi the, Nha nude can nghidn ciiu xay dyng, ban hanh mpt vdn bdn phdp ludt rieng dd bao vd du hpu cd nhdn, quy djnh day du cdc khdi nipm, nguydn tdc, thd chd vd thiet che bdo vp dii lipu ridng tu ciia ngudi Lugt bao vp dii lipu ed nhan ciing can quy djnh rd nhiing gidi hgn cua quyen, nhflng didu kipn va hgn che dgt vdi vipc khai thac, sii dyng, phd bidn du lipu cd nhan, quy dinh vd ca quan chuyen trdch theo doi, giam sdt, gidi quydt cdc khieu ngi, td cdo vd quydn ndy trdn thyc te Thii hai, siia ddi, bd sung cdc quy djnh vd bao mat thdng \mldu lipu cdc lugt chuydn ngdnh nhu Lugt Cdng nghp thdng tin, Lual An loan thdng tin mgng, Lugt An ninh mang Nhu da de cap, cdc quy djnh ve van de ndy phdp lugt cua chdu Au va Hoa Ky rat cu the va chat che, cac van ban phap lual ciia Vi?t Nam mdi chi dung lgi d miic quy dinh nguydn tae chung 3.2 Nhirng kinh nghipm gpi m& cho ndn hidu qud dp dung thyc Id thdp Vi vipc hodn thipn phdp lu^t bao vp quyen vdi vgy, vide sua ddi, bo sung cdc quy djnh vd du lipu cd nhdn Vipt Nam van dQ la rat can thidt Tir thuc trang phap lual nude, ddi Thir ba, siia ddi, bd sung cdc quy djnh chidu vdi cdc quy djnh phdp luat ciia vd chd tai vdi nhiing hanh vi vi phgm Nhu chau Au vd Hoa Ky, c6 thd gcri md mdt so da phdn lich, che tdi xii phal vi pham quydn giai phdp nham hoan thien phdp ludt ve vd sy ridng tu ndi chung va du" Ueu rieng tu quyen dupc bdo vp bi mat dii lieu ca nhan d ndi rieng tai Vi?t Nam hidn qua thap so vdi nude la nhu sau: chd tai d chau Au va cdc qudc gia khdc, chua tuong xiing vdi miic dp nghiem trgng cua Thii nhat, xay dyng mpt van ban phap lugtriengbdo vp du' lieu ca nhan Nhu da de hdnh vi vi pham, chua dam bdo tinh ran de Vi vay, Nha nude can siia doi cdc van ban cgp, trudc bdi cdnh Cdch mgng cong nghiep phdp Iugl cd lien quan dd quy djnh nhiing 4.0, d chdu Au da cd van bdn phdp ludt hinh thlic chd tai nghiem khac hon, dgc bipt chung ciia EU vd nhidu nude khu vyc la vd hdnh chinh \ a dan su, vdi cdc ca quan, da ban hanh van ban phdp luatridngbao vp HGHltN Cmi I CO S6 9(409)-T5/2020^^LAP P H A P **" KINH NGHIEM QUOC TC td chiic, doanh nghi?p va ca nhan vi pham quyen ve du li?uriengtu L,-.,H.nn„hnn •n • L„Thtr tu bao dam nghia ^-uton^ong bao vp va thuc day quyen ve su neng tu Nhu da phdn lich d cae phan yen quyen ve sy neng tu Id quydn ngudi ea ban, eo y nghia rat quan trpng, dupc cdng nhgn va bao \e ben lugt nhdn quydn qudc id va phdp lugt cua hau het qudc gia Sy phdt tridn cua cdng nghp da cdi thipn ddng kd ddi sdng ciia ngudi, song cflng la mpt nguy co ldn vdi quydn vd syridngtu, cdng ngh? cd the trd cdng cy dd nhidu chu the, dd cd nhd nude, gidm sdt va can thipp va ddi sdng ridng nr cua ngudi CJ Vipt Nam, quydn ridng tu HiKjc bao v? boi HiJn phip va "^'^^ "^.a chuyen ngtoh, song Irong thvrc le sV cua Nha HUOC voi Quycn HBy tliieu V ^ ^ tfupcWc hi^" '^^ira ^^^ ^^ ^ ^^^^ ^ ^ „6 D^c ^ ^^ ^^.^ ^ ^ ^ ^ ^ ^ ^ ^ ^^„ ,5 nhung j ^.^^ "^.^ ^ ^^^ ^ ^ ^ ^^ ^ ^ ^ nhd nydc ^ ^ j-.^^ ^^^ ^j^^-p ^^^ ^ ^ ^ tj^^ng qua vipc ^^ (,^-p ^^ ^-^ ^^^^ ^ ^^^ ^^ nhSn Vi vgy, ^^.^j^g ^h^ g^^n tdi, Nhd nude can tiep tyc ^ay dyng, hoan thipn hp thong phap lu^t de thiic ddy va bao vp hipu qua hon quyen ve syridngtu ndi chung, quyen ve dii hpu cd nhan noiriengtheo diing tinh than eiia Hien phdp nam 2013 va cdc dieu udc quoc te md Vipt Nam da tham gia • Tdi lipu tham khdo Amber Pariona, "What Was the Digital Revolution?", 2017, https://www.worldatlas.cora/ articles/whatwas-the-digital-revolulion.htnil European Commission, "What is personal data?", https://ec.europa.eu/info/law/law-topic/dataprotection/reform/what-personal-data_en Cam Thi, "Tiin Ian tinh tr?ng mua ban thong tin ci nhan", 2018, https://kiemsat.vn/tran-lan-tinh-trangmua-ban-thong-tin-ca-nhan-50866.html Convention fh the Protection of Individuals with regard to the Automatic Processing of Personal Data Convention ETS No 108, Stasbourg, 1981 Chinh phu Du thao Nghj djnh quy djnh chl tiet mpt s6 dieu cua Luat an ninh m^ing, 31/10/2018 Danny Palmer, "What is GDPR? Everything you need to know about the new general data protection regulations" 2019, https.//www.zdnet.com/article/gdpr-an-executive-guide-to-what-you-need-to-know/ Global Intemel liberty campaign, "Pn\ acy and human rights - An International Survey of Privacy Laws and Practice", 2004, http://gilc.org/pnvacy/survey/intro.html HG.org, Data Protection Law, https://wv.-w.hg.org/data-protection.html Hoang Thj Ng^c Lan, "Nhung thfinh luu co ban ciia cac cupc cich mang cong nghi?p ljch sir the g\6\", 2019, http://\iec.edu.vii/index.php?option=com_content&view= article&id=995:nh-ng-thanh-t-uco-b-n-c-a-cac-cu-c-cach-m-ng-cong-nghi-p-trong-l-ch-s-th-gi-i&catid=93&;Itemid=492 10 John Rose, Christine Barton & Rob Souza, "The Trust Advantage: How to Win with Big Data", Boston Consulting Group, 2013 https://www.bcg.com/publications/2013/marketmg-sales-trust-advantage-winwith-bigH^Ia.aspx 11 OECD, Guidelines governing the Protection of Privacy and Transborder Data Flows of Personal Data Paris, 1981 12 Chu Hong Thanh "Nhan Ihuc phap ly v^ q u y k neng tu", trongQuyfin vg su rieng tu, Nxb Chinh tri auoc giasvth9l,HaNi.2018 ^ 13 Richard Hodson, "Digital revolution: An explosion in information technology is remaking the world leaving few aspects of society untouched", 2018, https://wv™'.nature.com/articles/ d41586-018-O750O-2' 14 RMIT University, "what is Industry 4.0''", https://www.rmit.edu au/indusiry/develop-yourworkforce/'tailored-workforce-solutions'c4de/industry-40 15 Simon Davies, "Re-engmeering Ibe right lo privacy: how privacy has been transfomned from a right to a ccmnx)diiy".inAgicandRolcnbeTg(ed)"TechiK)IogyandPrivacy:tiieiiewlandscape",Mn"Press,1997 _ ,M^ 16 U.S GAO, "Report: INTERNET PRIVACY: Additional Federal Authority Could Enhance Consum Protection and Provide Flexibility" 2019, GAO-19-52 " 17 Oy ban Nhan quyen, Binh lu|n chung so 16 ve quyen ve sy neng tu, 1988 CVU 64 I LNOHllN AP P H A P _ / S 9{409)-15/2020 ... ve dii hpu cd nhan noiriengtheo diing tinh than eiia Hien phdp nam 2013 va cdc dieu udc quoc te md Vipt Nam da tham gia • Tdi lipu tham khdo Amber Pariona, "What Was the Digital Revolution?", 2017,... trang web cua cdng ty de cho phdp ngudi tieu diing tu chdi chia se dir lipu cho ben thii ba Van bdn ludt cflng cho phep quyen hdnh dgng rieng tu trudng hpp vi phgm dir lipu va cho phdp Bg trudng Tu... tren the gidi ma tat cd ede nude, dd ed Viet Nam Nhirng gid trj tham khao cho Vi^t Nam 3.1 Khdi qudt thf/rc trgng phdp lugt Vipt Nam ve bdo vp quyen doi vdi dit lipu cd nhan Vdn de bdo vp cdc