# 全球数据隐私实体调研 - 证据清单

完成日期: 2026-08-27

## 数据保护机构 (DPA) 类证据

### Evidence 1: 欧盟数据保护委员会 (EDPB)
Claim: EDPB是欧盟GDPR的主要监管协调机构，由各成员国数据保护机构组成
Source: EDPB官网
URL: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
Date: N/A
Excerpt: "The EDPB is composed of representatives of the EU national data protection authorities, and the European Data Protection Supervisor (EDPS)."
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 2: 法国CNIL
Claim: 法国国家数据保护委员会(CNIL)是法国的数据保护监管机构，负责GDPR和数据保护法的执行
Source: EDPB官网
URL: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
Date: N/A
Excerpt: "Commission Nationale de l'Informatique et des Libertés - CNIL (French Data Protection Authority)"
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 3: 德国BfDI
Claim: 德国联邦数据保护与信息自由专员(BfDI)是德国联邦层面的数据保护机构
Source: EDPB官网
URL: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
Date: N/A
Excerpt: "Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit"
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 4: 英国ICO
Claim: 英国信息专员办公室(ICO)是英国的数据保护监管机构，负责UK GDPR和Data Protection Act 2018
Source: ICO官网
URL: https://ico.org.uk/about-the-ico/our-information/working-with-other-bodies
Date: N/A
Excerpt: "UK GDPR and Data Protection Act 2018"
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 5: 爱尔兰DPC
Claim: 爱尔兰数据保护委员会(DPC)是爱尔兰的数据保护机构，许多跨国科技公司的欧洲总部设在爱尔兰
Source: EDPB官网
URL: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
Date: N/A
Excerpt: "Data Protection Commission, Ireland"
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 6: 巴西ANPD
Claim: 巴西国家数据保护局(ANPD)负责执行巴西《通用数据保护法》(LGPD)
Source: ANPD官网
URL: https://www.gov.br/anpd/pt-br/acesso-a-informacao/institucional/institucional
Date: 2026-04-08
Excerpt: "A Agência Nacional de Proteção de Dados (ANPD) é uma Agência Reguladora... tem como missão zelar pela proteção de dados pessoais orientada pela Lei nº 13.709, de 14 de agosto de 2018, a Lei Geral de Proteção de Dados (LGPD)"
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 7: 新加坡PDPC
Claim: 新加坡个人数据保护委员会(PDPC)负责执行新加坡《个人数据保护法》(PDPA)
Source: PDPC官网
URL: https://www.pdpc.gov.sg/who-we-are/about-us
Date: N/A
Excerpt: "The Personal Data Protection Commission (PDPC) was established on 2 January 2013 to administer and enforce the Personal Data Protection Act (PDPA)."
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 8: 日本PPC
Claim: 日本个人信息保护委员会(PPC)是日本APPI的主要监管机构
Source: Google Cloud白皮书
URL: https://services.google.com/fh/files/misc/appi_japan_whitepaper.pdf
Date: 2022-06
Excerpt: "The Japanese government established the Personal Information Protection Commission (PPC) in 2016 as the primary regulator for APPI."
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 9: 韩国PIPC
Claim: 韩国个人信息保护委员会(PIPC)负责执行韩国《个人信息保护法》(PIPA)
Source: kukie.io
URL: https://kukie.io/blog/south-korea-pipa-privacy-act
Date: 2026-03-20
Excerpt: "Enforcement sits with the Personal Information Protection Commission (PIPC)"
Scope fit: IN-SCOPE
Confidence: MEDIUM

### Evidence 10: 澳大利亚OAIC
Claim: 澳大利亚信息专员办公室(OAIC)负责执行澳大利亚《隐私法》(Privacy Act 1988)
Source: OAIC官网
URL: https://www.oaic.gov.au/about-the-OAIC/our-corporate-information/corporate-plans/corporate-plan-2024-25
Date: 2024-08-29
Excerpt: "our office regulates privacy and freedom of information (FOI) under the Commonwealth Privacy Act 1988"
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 11: 印度DPB
Claim: 印度数据保护委员会(DPB)是印度《数字个人数据保护法》(DPDPA)的执法机构
Source: setupanalytics.com
URL: https://setupanalytics.com/countries/india/
Date: 2026-05-06
Excerpt: "DPB · Data Protection Board of India - Sole DPDPA enforcement body"
Scope fit: IN-SCOPE
Confidence: MEDIUM

### Evidence 12: 欧洲数据保护监察员 (EDPS)
Claim: EDPS是欧盟机构的数据保护监管机构
Source: EDPS官网
URL: https://www.edps.europa.eu/press-publications/press-news/press-releases/2026/digital-omnibus-edpb-and-edps-support-simplification-and-competitiveness-while-raising-key-concerns_en
Date: 2026-02-11
Excerpt: "European Data Protection Supervisor (EDPS)"
Scope fit: IN-SCOPE
Confidence: HIGH

## 隐私科技/数据安全公司类证据

### Evidence 13: OneTrust
Claim: OneTrust是总部位于美国亚特兰大的隐私管理软件公司，是全球隐私科技领域的领导者
Source: OneTrust官网
URL: https://www.onetrust.com/about-us/all-locations/
Date: N/A
Excerpt: "US headquarters - Atlanta, 505 North Angier Avenue, Atlanta, Georgia 30308"
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 14: TrustArc
Claim: TrustArc是总部位于美国旧金山的隐私合规技术公司
Source: inven.ai
URL: https://www.inven.ai/company-lists/top-26-data-privacy-compliance-companies
Date: N/A
Excerpt: "TrustArc - Headquarters: San Francisco, California, United States"
Scope fit: IN-SCOPE
Confidence: MEDIUM

### Evidence 15: BigID
Claim: BigID是总部位于美国纽约的数据安全和隐私公司
Source: inven.ai
URL: https://www.inven.ai/company-lists/top-26-data-privacy-compliance-companies
Date: N/A
Excerpt: "BigID - Headquarters: New York, New York, United States"
Scope fit: IN-SCOPE
Confidence: MEDIUM

### Evidence 16: Securiti
Claim: Securiti是总部位于美国圣何塞的隐私安全公司
Source: inven.ai
URL: https://www.inven.ai/company-lists/top-26-data-privacy-compliance-companies
Date: N/A
Excerpt: "Securiti - Headquarters: San Jose, California, United States"
Scope fit: IN-SCOPE
Confidence: MEDIUM

### Evidence 17: DataGuard
Claim: DataGuard是总部位于德国慕尼黑的隐私合规公司
Source: inven.ai
URL: https://www.inven.ai/company-lists/top-26-data-privacy-compliance-companies
Date: N/A
Excerpt: "DataGuard - Munich, Bavaria, Germany"
Scope fit: IN-SCOPE
Confidence: MEDIUM

## 隐私计算公司类证据

### Evidence 18: Duality Technologies
Claim: Duality Technologies是同态加密和隐私计算领域的领先企业，总部位于美国新泽西州Hoboken
Source: Duality官网
URL: https://dualitytech.com/contact-duality
Date: N/A
Excerpt: "Headquarters - 5 Marine View Plaza, Suite 301, Hoboken, NJ 07030, USA"
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 19: OpenMined
Claim: OpenMined是一家总部位于英国的非营利组织，专注于隐私增强技术和联邦学习
Source: UK Parliament证据
URL: https://committees.parliament.uk/writtenevidence/132983/pdf/
Date: N/A
Excerpt: "OpenMined is a global non-profit that specialises in... entered a technical partnership with the UK AI Safety Institute"
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 20: Enveil
Claim: Enveil是美国的零知识加密/数据盲计算公司
Source: Claw & Talon
URL: https://clawandtalon.capital/startup-duality-technologies
Date: 2026-04-29
Excerpt: "Enveil with data-oblivious compute"
Scope fit: IN-SCOPE
Confidence: LOW

### Evidence 21: Duokey
Claim: Duokey是瑞士的安全科技公司，基于多方计算技术研发加密和密钥管理产品
Source: 钛媒体
URL: http://m.toutiao.com/group/7521944890272514602/
Date: 2025-07-01
Excerpt: "瑞士安全科技公司Duokey成立于2020年，公司致力于研发加密和密钥管理产品。该产品基于多方计算技术"
Scope fit: IN-SCOPE
Confidence: MEDIUM

## 数据交易所与数据基础设施类证据

### Evidence 22: SGFinDex (新加坡)
Claim: 新加坡金融数据交易所(SGFinDex)是新加坡金融数据共享基础设施
Source: MAS官网
URL: https://www.mas.gov.sg/development/fintech/SGFinDex
Date: N/A
Excerpt: "SGFinDex is a digital public infrastructure that uses national identity and centrally managed online consent system for secure access to financial data"
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 23: SGTraDex (新加坡)
Claim: 新加坡贸易数据交易所(SGTraDex)是新加坡供应链数据共享基础设施
Source: IMDA官网
URL: https://www.imda.gov.sg/-/media/imda/files/news-and-events/media-room/media-releases/2021/07/cdi-fact-sheet-for-atx.pdf
Date: 2021-07
Excerpt: "Singapore Trade Data Exchange (SGTraDex)"
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 24: Data Republic (澳大利亚)
Claim: Data Republic是澳大利亚的数据交换平台公司
Source: DFAT提交文件
URL: N/A (from search results)
Date: N/A
Excerpt: "Data Republic was founded in Australia in 2015"
Scope fit: IN-SCOPE
Confidence: MEDIUM

## 合规咨询公司类证据

### Evidence 25: Deloitte
Claim: 德勤是全球四大会计师事务所之一，提供数据隐私合规咨询服务，总部位于英国伦敦
Source: Deloitte官网
URL: https://www.deloitte.com/content/dam/assets-zone2/fi/fi/docs/services/consulting/2026/Deloitte%20data%20protection%20service%202026.pdf
Date: 2026
Excerpt: "Deloitte is the global market leader in security, privacy, and risk management services"
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 26: PwC
Claim: 普华永道是全球四大会计师事务所之一，提供数据隐私合规服务，总部位于英国伦敦
Source: thecconnects.com
URL: https://thecconnects.com/top-20-compliance-consulting-companies-2026-guide/
Date: 2026-01-06
Excerpt: "PricewaterhouseCoopers (PwC) - Headquarters: London, UK"
Scope fit: IN-SCOPE
Confidence: MEDIUM

### Evidence 27: EY
Claim: 安永是全球四大会计师事务所之一，提供数据保护合规服务，总部位于英国伦敦
Source: thecconnects.com
URL: https://thecconnects.com/top-20-compliance-consulting-companies-2026-guide/
Date: 2026-01-06
Excerpt: "Ernst & Young (EY) - Headquarters: London, UK"
Scope fit: IN-SCOPE
Confidence: MEDIUM

### Evidence 28: KPMG
Claim: 毕马威是全球四大会计师事务所之一，提供数据隐私合规服务，总部位于荷兰阿姆斯特尔芬
Source: thecconnects.com
URL: https://thecconnects.com/top-20-compliance-consulting-companies-2026-guide/
Date: 2026-01-06
Excerpt: "KPMG International - Headquarters: Amstelveen, Netherlands"
Scope fit: IN-SCOPE
Confidence: MEDIUM

## 国际组织/标准机构类证据

### Evidence 29: IAPP
Claim: 国际隐私专业协会(IAPP)是全球最大的隐私专业人士协会，总部位于美国新罕布什尔州
Source: IAPP官网
URL: https://iapp.org/about
Date: N/A
Excerpt: "The IAPP is a policy neutral, not-for-profit association founded in 2000... 90,000+ Members, 155 Countries with members"
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 30: ISO/IEC JTC 1 SC 27
Claim: ISO/IEC JTC1 SC27是制定信息安全标准（包括ISO/IEC 27701隐私信息管理体系）的国际标准委员会
Source: IAPP认证手册
URL: https://iapp.org/media/pdf/certification/zhCN_IAPP_Privacy_Certification_Candidate_Handbook_4.1.0.pdf
Date: 2023-01-30
Excerpt: "符合国际标准化组织 (ISO) 的 17024:2012 标准"
Scope fit: IN-SCOPE
Confidence: MEDIUM

### Evidence 31: ENISA
Claim: 欧盟网络安全局(ENISA)是欧盟的网络安全机构，总部位于希腊雅典
Source: ENISA官网
URL: https://www.enisa.europa.eu/topics/product-security/single-reporting-platform
Date: N/A
Excerpt: "The European Union Agency for Cybersecurity (ENISA)"
Scope fit: IN-SCOPE
Confidence: HIGH

## APEC CBPR认证机构类证据

### Evidence 32: JIPDEC (日本)
Claim: 日本信息经济社会推进协会(JIPDEC)是APEC CBPR和Global CBPR的日本认证机构
Source: JIPDEC官网
URL: https://english.jipdec.or.jp/Aboutus.html
Date: N/A
Excerpt: "April, 2024 - JIPDEC Certified as Global CBPR System Accountability Agent"
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 33: KISA (韩国)
Claim: 韩国互联网振兴院(KISA)是APEC CBPR的韩国认证机构
Source: APEC JOP报告
URL: https://www.globalcbpr.org/wp-content/uploads/GCBPRF-Cover-Letter-KISA-JOP-Recommendation-Report_09.23.2023_Endorsed.pdf
Date: 2023-09-26
Excerpt: "Korea Internet & Security Agency (KISA) as an APEC Accountability Agent for the CBPR System"
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 34: IMDA (新加坡)
Claim: 新加坡资讯通信媒体发展局(IMDA)是APEC CBPR的新加坡认证机构
Source: APEC CBPR官网
URL: https://cbprs.org/accountability-agents/
Date: N/A
Excerpt: "Infocomm Media Development Authority - Approved Economies to Certify: Singapore"
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 35: BBB National Programs (美国)
Claim: BBB National Programs是APEC CBPR的美国认证机构
Source: APEC CBPR官网
URL: https://cbprs.org/accountability-agents/
Date: N/A
Excerpt: "BBB National Programs - Approved Economies to Certify: USA"
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 36: TRUSTe / TrustArc (美国)
Claim: TRUSTe是APEC CBPR的美国认证机构之一
Source: APEC CBPR官网
URL: https://cbprs.org/accountability-agents/
Date: N/A
Excerpt: "TRUSTe - Approved Economies to Certify: USA"
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 37: Schellman (美国)
Claim: Schellman是APEC CBPR的美国认证机构
Source: APEC CBPR官网
URL: https://cbprs.org/accountability-agents/
Date: N/A
Excerpt: "Schellman - Approved Economies to Certify: USA"
Scope fit: IN-SCOPE
Confidence: HIGH

### Evidence 38: NCC Group (美国/英国)
Claim: NCC Group是APEC CBPR的美国认证机构
Source: APEC CBPR官网
URL: https://cbprs.org/accountability-agents/
Date: N/A
Excerpt: "NCC Group - Approved Economies to Certify: USA"
Scope fit: IN-SCOPE
Confidence: HIGH

## EU Data Act 相关机构

### Evidence 39: ARCEP (法国)
Claim: 法国电子通信与邮政监管局(ARCEP)负责法国EU Data Act中的数据共享和互操作性监管
Source: opt-on.eu
URL: https://www.opt-on.eu/data-act-guide-proteger-entreprise/
Date: 2026-02-23
Excerpt: "l'ARCEP s'occupe principalement de la gestion du partage des données et de l'interopérabilité sous le Data Act"
Scope fit: IN-SCOPE
Confidence: MEDIUM

### Evidence 40: EDIB (欧盟)
Claim: 欧洲数据创新委员会(EDIB)是欧盟数据治理相关的机构
Source: 欧盟数字战略
URL: https://digital-strategy.ec.europa.eu/cs/policies/data-governance-act-explained
Date: 2026-07-03
Excerpt: "Evropský sbor pro datové inovace (EDIB)"
Scope fit: IN-SCOPE
Confidence: MEDIUM

## 美国FTC
### Evidence 41: US FTC
Claim: 美国联邦贸易委员会(FTC)是美国主要的隐私执法机构之一
Source: G7 DPA圆桌会议
URL: https://edps.europa.eu/system/files/2024-10/promoting_enforcement_cooperation_final_draft_en.pdf
Date: 2024-10
Excerpt: "The FTC obtained a $275 million penalty against videogame maker Epic Games"
Scope fit: IN-SCOPE
Confidence: HIGH

## 加拿大OPC
### Evidence 42: OPC Canada
Claim: 加拿大隐私专员办公室(OPC)是加拿大的数据保护监管机构
Source: G7 DPA圆桌会议
URL: https://edps.europa.eu/system/files/2024-10/promoting_enforcement_cooperation_final_draft_en.pdf
Date: 2024-10
Excerpt: "The OPC is investigating TikTok"
Scope fit: IN-SCOPE
Confidence: HIGH

## 加州CPPA
### Evidence 43: CPPA California
Claim: 加州隐私保护局(CPPA)是美国加州CCPA/CPRA的执行机构
Source: ICO官网
URL: https://ico.org.uk/about-the-ico/our-information/working-with-other-bodies
Date: N/A
Excerpt: "California Privacy Protection Agency"
Scope fit: IN-SCOPE
Confidence: HIGH

## 西班牙AEPD
### Evidence 44: AEPD Spain
Claim: 西班牙数据保护局(AEPD)是西班牙的数据保护监管机构
Source: EDPB官网
URL: https://www.edpb.europa.eu/notify-data-breach_mt
Date: N/A
Excerpt: "Agencia Española de Protección de Datos (Spanish Data Protection Authority)"
Scope fit: IN-SCOPE
Confidence: HIGH

## 荷兰AP
### Evidence 45: Autoriteit Persoonsgegevens Netherlands
Claim: 荷兰个人数据管理局(AP)是荷兰的数据保护监管机构
Source: EDPB官网
URL: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
Date: N/A
Excerpt: "Autoriteit Persoonsgegevens, Netherlands"
Scope fit: IN-SCOPE
Confidence: HIGH

## 意大利Garante
### Evidence 46: Garante Italy
Claim: 意大利数据保护监管机构(Garante per la protezione dei dati personali)
Source: EDPB官网
URL: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
Date: N/A
Excerpt: "Garante per la protezione dei dati personali, Italy"
Scope fit: IN-SCOPE
Confidence: HIGH

## 欧盟数据法案中的ACM
### Evidence 47: ACM Netherlands
Claim: 荷兰消费者与市场管理局(ACM)是荷兰Data Act的主要执行机构
Source: Fieldfisher
URL: https://www.fieldfisher.com/en/insights/eu-data-act-implementation-status-and-enforcement-across-eu-member-states
Date: 2025
Excerpt: "Authority for Consumers & Markets (Autoriteit Consument en Markt, ACM) - to be the main enforcer for Data Act obligations"
Scope fit: IN-SCOPE
Confidence: MEDIUM

## 隐私计算 - Inpher
### Evidence 48: Inpher
Claim: Inpher是瑞士的安全多方计算/隐私计算公司
Source: Claw & Talon (提及)
URL: https://clawandtalon.capital/startup-duality-technologies
Date: 2026-04-29
Excerpt: 搜索结果中提及"Inpher"作为同态加密领域公司之一
Scope fit: IN-SCOPE
Confidence: LOW

## 数据交易所 - DE-CIX
### Evidence 49: DE-CIX
Claim: DE-CIX是总部位于德国法兰克福的全球互联网交换和数据互联平台运营商
Source: DE-CIX官网
URL: https://www.de-cix.net/en/locations
Date: N/A
Excerpt: "DE-CIX operates Internet Exchanges in various metro markets in Europe, the Middle East, Asia, and North and South America"
Scope fit: PARTIAL
Confidence: MEDIUM

## Accenture
### Evidence 50: Accenture
Claim: 埃森哲是全球最大的咨询公司之一，提供隐私和数据保护合规服务，总部位于爱尔兰都柏林
Source: thecconnects.com
URL: https://thecconnects.com/top-20-compliance-consulting-companies-2026-guide/
Date: 2026-01-06
Excerpt: "Accenture Compliance Services - Headquarters: Dublin, Ireland"
Scope fit: IN-SCOPE
Confidence: MEDIUM