امکان سنجی انتقال داده‌های شخصی ضمن ادغام و تحصیل شرکت‌ها

دانشنامه حقوق اقتصادی

دوره 32، شماره 27، شهریور 1404، صفحه 133-152   

نوع مقاله: علمی پژوهشی

شناسه دیجیتال (DOI): 10.22067/economlaw.2025.92401.1432

نویسندگان

نسرین طباطبائی حصاری^{* 1}؛ امیر محمد قربان نیا²

¹دانشیار، گروه حقوق خصوصی و اسلامی، دانشکده حقوق و علوم سیاسی، دانشگاه تهران، تهران، ایران.

²دانش آموخته کارشناسی ارشد، حقوق خصوصی، دانشگاه تهران، تهران، ایران.

چکیده

از آنجائیکه در بازارهای مدرن، دارایی های دیجیتال از جمله داده ها، از اهمیت و کاربرد تجاری بسیاری برخوردارند، بخش بزرگی از موفقیت توسعه خارجی و ادغام و تحصیل شرکت ها، به انتقال داده ها ضمن این فرآیندها گره خورده است؛ لکن اکثر این داده ها را داده های شخصی کاربران، مشتریان و کارمندان تشکیل میدهند که با عنایت به ابهام درمورد مالکیت و کارکرد اقتصادی این نوع خاص از داده ها و نگرانی های مربوط به حریم خصوصی، قابلیت انتقال آن ها به عنوان دارایی شرکت ها، با چالش های حقوقی مواجه است. لذا پژوهش حاضر با روش توصیفی-تحلیلی و با استفاده از منابع کتابخانه ای مکتوب و دیجیتال، ضمن مطالعه تطبیقی مقررات این حوزه در کشورهای پیشرو مثل آمریکا و اتحادیه اروپا در کنار مقررات ایران، به این سوال اصلی پرداخته است که انتقال داده های شخصی به عنوان دارایی ضمن ادغام و تحصیل شرکت ها ممکن است یا خیر. یافته های این نوشتار نشانگر این امر است که دلایلی از جمله رویکرد های تحلیل اقتصادی، اهمیت منافع عمومی و لزوم توجه به منافع مشروع شرکت ها، در کشورهایی با بازار آزاد، مثل آمریکا، انتقال پذیری داده های شخصی را توجیه میکنند؛ هر چند وجود دغدغه های حقوق بشری در قالب موانع قانونی و قراردادی در کنار الزامات فنی و عملی انتقال امن داده ها ضمن حفظ محرمانگی، قابلیت انتقال داده های شخصی را محدود و نیازمند کسب رضایت اشخاص موضوع داده مینمایند.

کلیدواژه‌ها

انتقال دارایی؛ حریم خصوصی؛ داده های شخصی؛ مالکیت داده ها

مراجع

[1] Adl, Mustafa. (2006). Civil Law, second edition, Taha Publications, Qazvin.

[2] Akkermans, Bram. (2015). The Numerus Clausus of Property Rights. M. Graziadei and L. Smith, eds., Comparative Property Law: Global Perspectives, Cheltenham: Edward Elgar, 2016, Maastricht Faculty of Law Working Paper, 1-23. Available at SSRN: https://ssrn.com/abstract=2693667.

[3] Alborzi, Sadrollah. (1382). Creating favorable conditions for company mergers. Taavon Journal, 148, 72-77. (In Persian)

[4] Ansari, Bagher. (1390). Privacy Law. Ed 3, Samt Publications, Tehran, Iran. (In Persian)

[5] Ansari, Bagher. (1402). Principles of Personal Data Processing. First Edition, Enteshar Company Publications, Tehran, Iran. (In Persian)

[6] Ansari, Bagher & Ansari, Esmail. (1391). Economic Analysis of Information Law. Comparative Law Review Journal, 3(2), 1-21. (In Persian)

[7] Ansari, Bagher & Attar, Shima. (1402). Rights of Cyberspace Users. First Edition, Enteshar Company Publications, Tehran, Iran. (In Persian)

[8] Autoriteit Persoonsgegevens. (2023). Legal bases from the GDPR explained. Available at: (https://www.autoriteitpersoonsgegevens.nl/en/themes/basic-gdpr/gdpr-basics/legal-bases-from-the-gdpr-explained) Visited 2025/01/15.

[9] Bahmanpouri, Abdollah & Shadmanfar, Mohammad Reza & Pourgholami Farashbandi, Mojtaba. (2014). A jurisprudential study of the ownership of computer data, Jurisprudence and Fundamentals of Islamic Law, 47(2), 231-244, doi: 10.22059/jjfil.2014.53403.

[10] Bergelson, Vera. (2003). It's Personal But is it Mine? Toward Property Rights in Personal Information, UC Davis Law Review, 37(379), Available at SSRN: https://ssrn.com/abstract=870070.

[11] Bottis, M. & Bouchagiar, G. (2018). Personal Data v. Big Data: Challeng-es of Commodification of Personal Data, Open Journal of Philosophy, 8, 206-215. doi: 10.4236/ojpp.2018.83015.

[12] Bruegel. (2016). The economic value of personal data for online platforms. firms and consumers, Available at: (https://www.bruegel.org/blog-post/economic-value-personal-data-online-platforms-firms-and-consumers) Visited 2025/07/01.

[13] Burns, Joseph W. (1957). Legal, Economic and Political Considerations Involved in Mergers. Vanderbilt Law Review, 11, 59-84.

[14] Clarkson, Kenneth W. & Miller, Roger LeRoy. (1982), Industrial Organization, Theory, Evidence, and Public Policy, McGraw-Hill Book Company, London.

[15] DePamphilis, D. (2018), Mergers, Acquisitions, and Other Restructuring Activities: An Integrated Approach to Process, Tools, Cases, and Solutions. 9th ed. Academic Press, New York.

[16] Edvin W. Miller, (2008), Merger & Acqusition, Blackwell, New York.

[17] Eleftheriou, Iliada & Embury, Suzanne M. & Moden, Rebecca, et al. (2018). Data journeys: Identifying social and technical barriers to data movement in large. complex organisations, Journal of Biomedical Informatics, 78, 102-122.

[18] Emami, Hassan. (1377). Civil law. Volume 1, Ed 2, Eslamie Publications, Tehran, Iran. (In Persian)

[19] Esmaeili, Mohsen & Narimanpour, Mahdi. (1403). Legal Basis of Personal Data Exchange (Comparative Study of EU General Data Protection Regulations and Iranian Law). Islamic Law, 21(82), 123-165. (In Persian)

[20] European Data Protection Board. (2023). Process personal data lawfully. Available at: (https://www.edpb.europa.eu/sme-data-protection-guide/process-personal-data-lawfully_en) Visited 2025/01/12.

[21] European Data Protection Board. (2024). Guidelines 1/2024 on processing of personal data based on Article 6(1)(f) GDPR.

[22] Financier Worldwide Magazine. (2014). The value of data assets in a US M&A deal. Available at: (https://www.financierworldwide.com/the-value-of-data-assets-in-a-us-ma-deal-three-key-questions-to-ask) Visited 2025/01/26.

[23] Galli, Ermes. (2021). The commodification of our digital identity, Available at: (https://www.filodiritto.com/commodification-our-digital-identity#_ftn47) Visited 2025/06/31.

[24] Glancy, Dorothy J. (2016). Personal Information as Intellectual Property, Available at: (https://www.law.berkeley.edu/files/belt_IPSC2010Glancy2.pdf).

[25] Guntrip, Mark. (2024). The Top 5 Barriers to Data Sharing and How to Overcome Them. Available at: (https://www.immuta.com/blog/the-top-5-barriers-to-data-sharing-and-how-to-overcome-them/) Visited 2025/01/14.

[26] Katouzian, Nasser. (2019). Property and Ownership, fifty edition, Mizan Publications, Tehran.

[27] Kusstatscher, Verena & Cooper, Cary L. (2005). Managing Emotion in Merger and Acquisition, Edward Elgar Publishing, UK.

[28] Latifzadeh, Mahdieh & Qabouli Dorafshan, Seyyed Mohammad Mahdi & Mohseni, Saeed & Abedi, Mohammad. (1401). Identifying the nature of personal data and searching for an appropriate legal basis to support it in the Iranian legal system, Studies in Islamic Jurisprudence and Law, 14(27), 361-394. doi: 10.22075/feqh.2021.22153.2696.

[29] Lauren Henry Scholz. (2016). Privacy as Quasi-Property, 101 lowa L. Rev. 1113-1142, Available at: (https://ir.law. fsu.edu/articles/418).

[30] Mamun, Abdullah & Dev, Mishra & Lei, Zhan. (2021). The value of intangible capital transfer in mergers. Journal of Economics and Business, 117, 1-18.

[31] Meyer, Catherine D. (2015). Transferring Customer Data in an Asset Sale. Available at: (https://www.pillsburylaw.com/en/news-and-insights/transferring-customer-data-in-an-asset-sale.html) Visited 2025/01/25.

[32] Orrick. (2015). Fines Issued for Transfer of Customer Data in an M&A Asset Deal. Available at: (https://www.orrick.com/en/Insights/2015/08/Fines-Issued-for-Transfer-of-Customer-Data-in-an-MA-Asset-Deal) Visited 2025/01/17.

[33] Panahi, Mahdi & Shams, Ahmad & Mohammad Taheri, Mahmood Reza. (1399). Explain the concept of property and their types in the virtual world. Islamic Law Research Journal, 21(1), 243-266. (In Persian)

[34] Purtova, Nadezhda. (2009). Property in Personal Data: A European Perspective on the Instrumentalist Theory of Propertisation. European Journal of Legal Studies 2(3), Available at SSRN: https://ssrn. com/abstract-2363634.

[35] Raysync. (2022). 3 Challenges Faced by Big Data Transfer Technology. Available at: (https://www.raysync.io/news/3-challenges-faced-by-big-data-transfer-technology/) Visited 2025/01/20.

[36] Razavi, Seyyed Ali & Razavi, Seyyed Muhammad & Pasban, Muhammad Reza. (1398). The Legal Nature of Merger of Companies; A Comparative Study in Imamiyah Jurisprudence. Iranian and Egyptian Law, Civil Jurisprudence Doctrines, 19, 3-32.

[37] Rejali, Mohsen & Rashvand, Mehdi & Badee Sanaye Esfahani, Amin. (1392). Legal Nature of Transferring Debts within Merging Public Companies and its impacts on Non-shareholder Creditors and Debtors. Dadgostari Legal Journal, 77(84), 70-102. (In Persian)

[38] Saleh Abadi, Zahra & Soleiman Dehkordi, Elham & Hosseini, Saede. (1396). Principles governing the protection of personal data with emphasis on the Iranian legislative system. The Second International Conference and the Fourth National Conference on Management and Humanities Research, Tehran, Iran. (In Persian)

[39] Samuelson, Pamela. (2000). Privacy As Intellectual Property? Stanford Law Review, 52(5), 1-42.

[40] Schwartz, Paul M. (2005), Property, Privacy, and Personal Data, HARVARD LAW REVIEW, 117, 2055-2128, Available at SSRN: https://ssrn.com/abstract=721642.

[41] Singh, A. (2016). Protecting Personal Data as a Property Right, ILI Law Review, 123-139.

[42] SNP. (2024). Data transformation challenges in mergers and acquisitions, Available at: (https://www.snpgroup.com/en/resources/blog/data-transformation-challenges-in-mergers-and-acquisitions/) Visited 2025/06/31.

[43] Sogomi, Frankline & Thuranira, Monica & Kamau, Charles. (2022). Economic Impact of Mergers and Acquisitions in Corporate World: An African context. African Journal of Commercial Studies, 1, 15-26.

[44] Stebbins, Ann Beth & Hartmann, Thad, (2025), Mergers & Acquisitions Laws and Regulations USA 2025, Available at: (https://iclg.com/practice-areas/mergers-and-acquisitions-laws-and-regulations/usa) Visited 2025/06/31.

[45] Tabatabai Hesari, Nasrin & Sahranavard, Ghazaleh. (1403). Digital Assets as Security. Economic Law Journal, 31(26), 1-21. (In Persian)

[46] Tabatabaei Nejad, Mohammad. (1389). Information as An Asset for Domestic Companies. The Second National Conference on Promoting Domestic Power, Tehran, Iran. (In Persian)

[47] Taghavi Fard, Mohammad Taghi & Mohammad Reza, Taghavi & Faghihi, Mehdi and Jamshidi, Mohammad Javad. (2017). A Comparative Study on Information Privacy Protection Acts in Iran and Selected Countries. Majlis and Rahbord, 24(89), 301-333. (In Persian)

[48] Tanveer, Hussain & Abongeh A, Tunyi & Jacob, Agyemang. (2023). Corporate governance transfers: the case of mergers and acquisitions. International Journal of Disclosure and Governance, 21, 543-567.

[49] Termsfeed. (2024). Business Transfer Clause in Privacy Policy. Available at: (https://www.termsfeed.com/blog/business-transfer-privacy-policy/), Visited 2025/01/10.

[50] Tienari, J. & Vaara, E. (2016). Identity construction in mergers and acquisitions: A discursive sensemaking perspective. Handbook of Organizational Identity, Oxford University Press, England.

[51] Ureason. (2024). Data Sharing - The Barriers. Available at: (https://www.ureason.com/resources/data-sharing-part-2/) Visited 2025/01/14.

[52] Van Erp, Sjef. (2023). The Future of Private Law between Sustainability Challenges and the Digital Revolution.'Managed Retreat' and Digital Assets as Examples. SSRN, 1-14.

[53] Vrabec, Helena U. (2021). Data Subject Rights under the GDPR with a Commentary through the Lens of the Data-driven Economy. Oxford University Press, England.

[54] Walton, Chris. (2024). Legal Aspects of Mergers and Acquisitions. Available at: (https://etonvs.com/ma/legal-aspects-of-mergers-and-acquisitions/) Visited 2025/01/26.

[55] YING, HU. (2021). Private and common property rights in personal data, 173-201.

[56] Zahedi, Mahdi & Chavoshi Lahrood, Ebrahim. (1401). Comparative Study of the principle of Numerus Clausus in the intellectual property rights. Comparative Law Review Journal, 13(2), 553-575. (In Persian)

[57] Zand, Hossein & Ansari, Bagher. (1403). Data Protection in Iranian Statutory Law. Ed 2, Enteshar Company Publications, Tehran, Iran. (In Persian)