被遺忘權概念之形成，最早係源於歐盟的歷史發展脈絡中，目的係在保護更生人之隱私，賦予其得向新聞媒體請求刪除有關其過去犯罪行為之報導，以使第三人得忘記其過去，進而有改過自新之機會，然隨著Google v. AEPD案判決之確立，以及《一般資料保護規則》之制定，被遺忘權的權利主體亦正式擴張至所有人，資料主體得於符合GDPR第17條刪除事由之情狀下，向資料控管者請求刪除其個資，連同以個資所形成之網頁連結、重製、複本等，均得作為刪除之客體。是故，本文將以被遺忘權於歐盟之發展為核心，探究其於我國法制與實務之取徑，並同時以大數據應用與個資處理原則之衝突，瞭解被遺忘權之調和效果，以及透過歐盟與我國實際大數據應用之案例，推知資料控管者分別於該案中，所應負個資保護義務之程度。最後，本文乃綜合研究發現，進一步提出對於我國個資法修法、判決調整，以及對大數據資料控管者因應對策調整之研究建議。;The concept of the Right to be Forgotten originated from the historical development context of the European Union, aimed at protecting the privacy of ex-offenders. This right allows them to request the deletion of reports about their past criminal activities from news media, enabling third parties to forget their past and giving them a chance for rehabilitation. However, with the establishment of the Google v. AEPD case ruling and the enactment of the General Data Protection Regulation (GDPR), the Right to be Forgotten has been formally extended to all individuals. Under Article 17 of the GDPR, data subjects can request data controllers to delete their personal data, including any web links, replications, or copies formed from such data, as long as the conditions for deletion are met. Therefore, this paper will focus on the development of the Right to be Forgotten within the European Union, exploring its pathways in the legal and practical framework of our country. It will also address the conflict between big data applications and principles of personal data processing to understand the harmonizing effect of the Right to be Forgotten. Additionally, through examining actual cases of big data applications in the EU and our country, this paper aims to deduce the extent of personal data protection obligations that data controllers should bear in each case. Finally, based on comprehensive research findings, this paper will further propose recommendations for amendments to our Personal Data Protection Act, adjustments to judicial decisions, and strategies for big data controllers to adapt accordingly.
