Title Page
ABSTRACT
Contents
CHAPTER 1. INTRODUCTION IN E-COMMERCE 11
1.1. Basic Definitions 14
1.1.1. Definition in Cross-border E-commerce 14
1.1.2. Definition in Personal Information and Data 19
1.1.3. Definition in Privacy 21
1.2. Features on Cross-border E-commerce and Significance in Protection on Personal Data 23
1.2.1. Features on Cross-border E-commerce 23
1.2.2. Significance in Protection on Personal Data 27
1.3. The Infringement to Privacy and The Evolution of Attempt to Protection 29
1.3.1. The Infringement to Privacy 30
1.3.2. The Evolution of Attempt to Protection 34
1.4. Current Condition in Protection 37
CHAPTER 2. LEGAL BASIS - DEVELOPMENT ON SUPRANATONAL SUBSTANTIVE REGULATION 38
2.1. 1980 Guidelines on the Protection of Privacy and Trans-border Flows of Personal Data 38
2.1.1. Eight Principles in the Guideline 39
2.1.2. Evaluation on the Guideline 42
2.2. APEC's Data Privacy Framework 44
2.2.1. The Drawback on APEC Framework 45
2.2.2. The Achievement on CBPR 45
2.2.3. The 2 Approaches on CBPR 47
2.2.4. Evaluation on CPBR 48
2.3. Struggling on GATS of WTO 51
2.4. General Data Protection Regulation in Europe Union 53
2.4.1. Right of Information Provision 58
2.4.2. Right of Access 59
2.4.3. Right to Rectification 59
2.4.4. Right to Erasure 60
2.4.5. Right to Restriction of Processing 61
2.4.6. Right to Data Portability 61
2.4.7. Right to Object 62
CHAPTER 3. CASE STUDY 65
3.1. Typical Cross-border Personal Privacy Information Disclosure Accident Cases 65
3.1.1. Recent Criminal Investigation on Facebook 65
3.1.2. EU - The First Application on GDPR 67
3.1.3. Marriott Hotel Database Is Hacked, 500 Million User Information Is Leaked 71
3.1.4. Singapore Shared Bicycle oBike User Data Was Leaked 72
3.1.5. MyFitnessPal User Information Leaked 73
3.2. Ways to Leak Personal Privacy Information 74
3.2.1. Mobile Device Mode 74
3.2.2. Public Equipment Mode 77
3.3. Analysis of the Causes of Personal Privacy Information Security in Cross-border E-commerce 77
3.3.1. Dataization of Information 77
3.3.2. Legislative Reasons 79
3.3.3. Government Supervisions' Weak 80
3.3.4. Businesses Do Not Follow the Rules 81
3.3.5. Users' Weak Awareness of Personal Privacy Protection 83
CHAPTER 4. COMPARISON OF SUBSTANTIVE LAW AND IMPROVEMENT ANALYSIS 85
4.1. Convergence and Divergence of Existing International Legislation 85
4.1.1. Convergence of Existing International Legislation 87
4.1.2. Divergence of Existing International Legislation 93
4.2. Discussion on Current Legislation 100
4.2.1. Disparity on Data Protection on Domestic Legislation 100
4.2.2. Lack of International Cooperation 104
4.2.3. Current International Legislation Is Still Not Perfect 109
4.3. Suggestions For Improvement. 119
4.3.1. Promoting Countries Improving Domestic Personal Information Protection Legislation 119
4.3.2. Promoting the Establishment of Industry Self-Discipline Mechanism 122
4.3.3. Strengthening International Cooperation 124
4.3.4. Raise Awareness of Personal Information Protection 125
CHAPTER 5. CONCLUSION 127
REFERENCES 130