航空業法令遵循機制之建構—以個人資料保護為中心

Abstract

近年來網路發達，資訊傳播快速，個人資料保護議題越來越被重視，歐盟於2016年通過歐盟個人資料保護規則(General Data Protection Regulation, GDPR)，並於2018年5月25日正式施行，民用航空業因需存取旅客之護照號碼、聯繫方式(例如：手機號碼、電子信箱)以及信用卡付款等資訊，凡航線有涉及歐盟國家及服務歐盟國籍旅客之航空公司，幾乎都是GDPR監管之對象。回顧歷年來民用航空業之個人資料外洩事故，不僅造成旅客及合作夥伴之不信任，亦造成企業之商譽受損，旅客對於航空公司一直以來注重之「安全」有疑慮，直接影響公司之營收與未來發展，因此，企業應正視輕忽法令遵循所帶來之後果。 我國民用航空業主要由航空公司、機場公司及政府機關所組成，以桃園國際機場(TPE)為例，每年出入國之旅客不計其數，且位於東亞航空樞紐機場之地理位置，肩負國人空運首選之使命，因其本身之特性，常常亦代表著國家門面。因此，建構有效之法令遵循計畫，除了可以提升企業形象及旅客服務滿意度外，對於提升國家整體競爭力亦有所助益。 本文首先以歷年民用航空業所面臨違反法律之案例帶出法令遵循之意義，接著指出未來民用航空業發展智慧機場可能遇到之挑戰，最後將以國際上最嚴格之個人資料保護法—歐盟GDPR之規範為探究基礎，對於未來民用航空業之智慧機場趨勢進行分析，並從實務角度提出如何建構法令遵循機制，以減少未來企業違反個人資料保護相關法令之可能，期待創造航空公司、機場公司、旅客及政府機關多贏之局面。

In recent years, with the development of the Internet and the rapid dissemination of information, the issue of personal data protection has become increasingly important. The European Union adopted the EU General Data Protection Regulation (GDPR) in 2016 and it officially came into effect on May 25, 2018. The airline industry is regulated by the GDPR because of the need to access passenger passport numbers, contact information (e.g., cell phone numbers, email addresses), and credit card payments, and almost all airlines with routes involving EU or serving passengers of EU citizenship are subject to the GDPR. The leakage of personal information in the airline industry over the years has not only caused distrust among passengers and partners, but also damaged the business reputation of companies. The airline industry in Taiwan is mainly composed of airlines companies, airports companies and government agencies. Take Taoyuan International Airport as an example, there are countless passengers entering and leaving the country every year, and it is located as an aviation hub airport in East Asia, which often represents the face of the country due to its characteristics. Therefore, the establishment of an effective legal compliance program will not only enhance the corporate image and passenger satisfaction, but also contribute to the overall competitiveness of the country. This thesis firstly brings out the significance of legal compliance with the cases of violation of laws faced by the airline industry in the past years, and then points out the challenges that the airline industry may encounter in developing smart airports in the future. We hope to create a win-win-win situation for airlines companies, airport companies, passengers and government agencies