?????? GDPR ?????????????????? Privacy by Design ????????/title> </head> <body> <header> <div class="mg-header container"> <a href="/"><div class="mg-logo"><img src="/images/logo.webp" width="108" height="57" alt="昆仑邮件系统"></div></a> <div class="mg-nav"> <ul class="nav-list"> <li class="nav-li"><a href="/">首页</a></li> <li class="nav-li"><a href="#">产品和服务</a> <ul class="sub-nav-list"> <li class="sub-nav-li"><a href="/depth-understand.html">国产邮件系统</a></li> <li class="sub-nav-li"><a href="/xinchuang_mail.html">信创邮件系统</a></li> <li class="sub-nav-li"><a href="/mailgate.html">邮件安全网关</a></li> </ul> </li> <li class="nav-li"><a href="/solution.html">解决方案</a></li> <li class="nav-li"><a href="/support.html">支持</a></li> <li class="nav-li"><a href="/kb/">知识库</a></li> <li class="nav-li"><a href="/bulletin/faq.html">FAQ问答</a></li> <li class="nav-li"><a href="/bulletin/industryInfo.html">行业资讯</a></li> <li class="nav-li"><a href="/search.html" class="nav-search-btn" aria-label="搜索"><svg viewBox="0 0 20 20"><circle cx="8.5" cy="8.5" r="6"/><line x1="13.5" y1="13.5" x2="18" y2="18"/></svg></a></li> </ul> </div> </div> </header> <div class="container"> <div class="kb-breadcrumb"> <a href="https://ztpop.net/">🏠 ???</a><span>›</span><a href="https://ztpop.net/kb/">?????/a><span>›</span>GDPR ??????????????? </div> <article> <div class="article-header"> <h1>?????? GDPR ?????????????????? Privacy by Design ????????/h1> <div class="article-meta"> <span>📅 2026-07-24</span> <span>📂 ????????/span> <span>⏱ ??35 ???</span> </div> </div> <div class="article-body"> <div class="toc"> <h4>📑 ???</h4> <ol> <li><a href="#s1">GDPR ????????????</a></li> <li><a href="#s2">Privacy by Design ?????????</a></li> <li><a href="#s3">??????????????????RFC 8620 JMAP??/a></li> <li><a href="#s4">??????Right to Erasure / Right to be Forgotten??/a></li> <li><a href="#s5">????????????</a></li> <li><a href="#s6">??????????????PIA??/a></li> <li><a href="#s7">????????????</a></li> </ol> </div> <h2 id="s1">????DPR ????????????</h2> <p>????????????????????GDPR, Regulation (EU) 2016/679??? 2018 ??5 ??25 ???????????DPR ??strong>?????????</strong>??rticle 3?????????????????????????????????????????????????????????????????????????????GDPR ?????/p> <p>????????GDPR ??????????????????????????strong>??????</strong>??ersonal Data, Art. 4(1)???</p> <ul> <li><strong>?????????????????/strong>??-582/14 Breyer ?????????</li> <li><strong>??????</strong>??????????????/li> <li><strong>?????/strong>???????????????????P???????????????</li> <li><strong>???????????????</strong>??rt. 9???????????????????????</li> </ul> <p>?????? GDPR ????????????????strong>????????????</strong>??strong>?????????</strong>??/p> <table> <caption>??1??DPR ???????????????</caption> <thead><tr><th>???</th><th>???/???</th><th>?????????</th></tr></thead> <tbody> <tr><td>Art. 5(1)(a)</td><td>??????????????????/td><td>?????????????????/td></tr> <tr><td>Art. 5(1)(c)</td><td>??????????ata Minimisation??/td><td>????????????????????/td></tr> <tr><td>Art. 15</td><td>??????Right of Access??/td><td>????????????</td></tr> <tr><td>Art. 17</td><td>??????Right to Erasure??/td><td>??????????????/td></tr> <tr><td>Art. 20</td><td>???????????Data Portability??/td><td>JMAP ???/IMAP ???</td></tr> <tr><td>Art. 25</td><td>Privacy by Design / Default</td><td>?????????????????/td></tr> <tr><td>Art. 33-34</td><td>????????????</td><td>72 ???????????????????/td></tr> <tr><td>Art. 35</td><td>??????????????PIA??/td><td>???????????????</td></tr> <tr><td>Art. 44-49</td><td>?????????</td><td>???????????CC??IA</td></tr> </tbody> </table> <h2 id="s2">????rivacy by Design ?????????</h2> <h3>2.1 ??????</h3> <p>GDPR Art. 25 ???????????????<strong>??????</strong>???????????????????????????????????strong>?????/strong>??strong>?????</strong>???????????????????????????????????????????/p> <ol> <li><strong>?????????</strong>????????????????????/li> <li><strong>??????</strong>?????????????????????????/li> <li><strong>??????</strong>??????????????????????????</li> <li><strong>???????/strong>??????????????????Positive-Sum??/li> <li><strong>???????????/strong>????????????????????/li> <li><strong>???????????/strong>??????????????????</li> <li><strong>??????</strong>???????????????</li> </ol> <h3>2.2 ???????????????Art. 5(1)(e) ????????/h3> <p>???????????????????????????????????/p> <pre class="language-bash"><code># Dovecot ?????????????????doveadm purge ??plugin??# ??????????expire ??? # /etc/dovecot/conf.d/90-plugin.conf plugin { # ???????????30 ???Trash?? expire = Trash 30 # ????????? 14 ???Spam?? expire2 = Spam 14 # ???????????365 ???Sent?? expire3 = Sent 365 # ??????????730 ?????????????? expire4 = 730 } # ????????? doveadm ????????? cat > /usr/local/bin/expire-old-emails.sh << 'SH' #!/bin/bash # ???????????????????????Dovecot ?????MAIL_DIR="/var/mail" RETENTION_DAYS=730 TRASH_RETENTION=30 SPAM_RETENTION=14 # ???????????? 30 ?????? find "$MAIL_DIR" -path "*/Trash/*" -name "*,*" -type f -mtime +$TRASH_RETENTION -exec rm {} \; find "$MAIL_DIR" -path "*/Spam/*" -name "*,*" -type f -mtime +$SPAM_RETENTION -exec rm {} \; # ????????????????????? find "$MAIL_DIR" -path "*/INBOX/*" -name "*,*" -type f -mtime +$RETENTION_DAYS -exec rm {} \; # ?????? doveadm force-resync -u '*' 2>/dev/null SH # ????????? doveadm expunge ????????? cat > /usr/local/bin/dovecot-expunge.sh << 'SH' #!/bin/bash # ?????????????????Dovecot ??????????????DOMAIN="example.com" LOG_FILE="/var/log/mail-expunge-$(date +%Y%m%d).log" # ???????????30 ??doveadm expunge -A mailbox Trash savedbefore 30d 2>&1 >> "$LOG_FILE" doveadm expunge -A mailbox Junk savedbefore 14d 2>&1 >> "$LOG_FILE" # ??????????730 ???????? doveadm expunge -A mailbox Sent savedbefore 730d 2>&1 >> "$LOG_FILE" SH chmod 755 /usr/local/bin/dovecot-expunge.sh # crontab ?????? echo "0 2 * * 0 /usr/local/bin/dovecot-expunge.sh" > /etc/cron.d/dovecot-expunge</code></pre> <h3>2.3 ??????????????</h3> <p>Privacy by Design ?????????????????strong>????????</strong>??????????????????????????????????/p> <pre class="language-cfg"><code># rsyslog ???????????? # /etc/logrotate.d/mail /var/log/mail.log /var/log/dovecot*.log { rotate 12 weekly compress delaycompress missingok notifempty postrotate # GDPR ????????????????????IP ??? # ???????????????????IP ??? invoke-rc.d rsyslog rotate > /dev/null 2>&1 || true endscript } # Postfix ???????? ?????????????# /etc/postfix/main.cf # ??????????????????: # debug_peer_level ???????????debug_peer_level = 2 # SMTP ?????????????????????????smtpd_command_filter = pcre:/etc/postfix/command_filter.pcre</code></pre> <h2 id="s3">??????????????????????RFC 8620 JMAP??/h2> <h3>3.1 ?????????????????</h3> <p>GDPR Art. 20 ????????????<strong>??????????????????/strong>???????????????????????????????????strong>?????????????/strong>??????????????????????/p> <ul> <li>????????FC 5322 ?????????????/li> <li>????????????????????????????????/li> <li>?????????????/li> <li>??????????????????? .eml, .mbox, JSON??/li> </ul> <h3>3.2 RFC 8620 JMAP ???</h3> <p>JMAP??SON Meta Application Protocol??FC 8620??? IETF ??????????????????????????????????????????????MAP ??? JSON ??????????????????????????/p> <table> <caption>??2??MAP ??IMAP ?????????????/caption> <thead><tr><th>????/th><th>IMAP (RFC 9051)</th><th>JMAP (RFC 8620)</th></tr></thead> <tbody> <tr><td>??????</td><td>??????????? FETCH</td><td>JSON????????/td></tr> <tr><td>???/???</td><td>??????</td><td>JMAP keyword ??????</td></tr> <tr><td>?????/td><td>????????/td><td>JMAP Contacts (RFC 8616)</td></tr> <tr><td>???</td><td>????????/td><td>JMAP Calendars (RFC 8621)</td></tr> <tr><td>??????</td><td>??????????/td><td>??????????????????</td></tr> <tr><td>??????</td><td>UIDNEXT + MODSEQ</td><td>@since ??? + state ???</td></tr> </tbody> </table> <h3>3.3 JMAP ????????????</h3> <pre class="language-bash"><code># JMAP ????????? Cyrus JMAP ??Stalwart JMAP??# ???????????JMAP ??? API ?????????????? # 1. ???????????????????????MAP Session Resource??cat > /usr/local/bin/jmap-export-for-user.py << 'PYTHON' #!/usr/bin/env python3 """ JMAP ?????? ??GDPR Art. 20 ??? ?????????????????????????????? JSON ??? """ import json import requests import os import sys JMAP_ENDPOINT = "https://mail.example.com/jmap" def get_jmap_session(username, password): """??? JMAP Session Resource""" resp = requests.post(JMAP_ENDPOINT, json={ "using": ["urn:ietf:params:jmap:core", "urn:ietf:params:jmap:mail", "urn:ietf:params:jmap:contacts"], "username": username, "password": password }) if resp.status_code != 200: print(f"JMAP ??????: {resp.status_code}") sys.exit(1) return resp.json() def export_all_mailboxes(session, username): """??????????????""" api_url = session['apiUrl'] mailbox_state = session['mailboxState'] # ?????????? mailbox_resp = requests.post(api_url, json={ "using": ["urn:ietf:params:jmap:core", "urn:ietf:params:jmap:mail"], "methodCalls": [ ["Mailbox/get", {"accountId": username}, "0"], ["Email/get", {"accountId": username, "fetchAllBodyValues": True}, "1"] ] }) result = mailbox_resp.json() return result def save_export(username, data): """????????? JSON ???""" output_dir = f"/tmp/gdpr-export-{username}" os.makedirs(output_dir, exist_ok=True) with open(f"{output_dir}/mailbox_dump.json", 'w') as f: json.dump(data, f, indent=2) # ??JSON ????????mbox ????????? with open(f"{output_dir}/export.mbox", 'w') as mbox: for email in data.get('emailList', []): if 'textBody' in email or 'htmlBody' in email: mbox.write(f"From {email.get('from', {})}\n") mbox.write(f"Date: {email.get('receivedAt', '')}\n") mbox.write(f"Subject: {email.get('subject', '')}\n") mbox.write(f"\n{email.get('textBody', email.get('htmlBody', ''))}\n\n") print(f"??????: {output_dir}") print(f"??????: {sum(os.path.getsize(f'{output_dir}/{f}') for f in os.listdir(output_dir))} bytes") return output_dir if __name__ == '__main__': username = sys.argv[1] if len(sys.argv) > 1 else input("?????") password = os.environ.get('JMAP_EXPORT_PASSWORD') or input("???:") session = get_jmap_session(username, password) data = export_all_mailboxes(session, username) save_export(username, data) PYTHON chmod 755 /usr/local/bin/jmap-export-for-user.py</code></pre> <h3>3.4 IMAP/mbox ???????????????</h3> <p>????????JMAP ????????????????????????????? IMAP ??????????????????</p> <pre class="language-bash"><code># ??? imapsync ???????????????????????? cat > /usr/local/bin/gdpr-imap-export.sh << 'SH' #!/bin/bash # GDPR Art. 20 ????????????IMAP ?????mbox # ??????: ./gdpr-imap-export.sh user@example.com /tmp/export USER="$1" OUTDIR="$2" if [ -z "$USER" ] || [ -z "$OUTDIR" ]; then echo "???: $0 <email> <output_directory>" exit 1 fi mkdir -p "$OUTDIR" # ??? offlineimap ??mbsync (isync) ??? # ??? A: mbsync cat > "/tmp/mbsyncrc_${USER//@/_}" << CONF IMAPAccount $USER Host imap.example.com Port 993 User $USER PassCmd "security find-generic-password -a $USER -w" SSLType IMAPS CertificateFile /etc/ssl/certs/ca-certificates.crt MaildirStore local Path $OUTDIR/ Inbox $OUTDIR/INBOX IMAPStore remote Account $USER Channel $USER Master :remote: Slave :local: Patterns * CONF mbsync -c "/tmp/mbsyncrc_${USER//@/_}" "$USER" # ??? Maildir ??mbox for dir in "$OUTDIR"/*/; do maildir2mbox "$dir" "${dir%/}.mbox" 2>/dev/null || true done echo "??????: $OUTDIR" echo "???????????????????????: tar czf ${USER}.tar.gz -C $OUTDIR ." SH chmod 755 /usr/local/bin/gdpr-imap-export.sh</code></pre> <h2 id="s4">??????????ight to Erasure??/h2> <h3>4.1 ???????????/h3> <p>GDPR Art. 17??ight to Erasure / "Right to be Forgotten"??????????????????????????????????????/p> <ol> <li>?????????????????</li> <li>????????????????????????</li> <li>????????????????????????</li> <li>???????????/li> <li>?????????????????/li> </ol> <p><strong>???????????/strong>??rt. 17(3)???</p> <ul> <li><strong>???????????????</strong>??????????????????????/li> <li><strong>??????</strong>??????????????? 7 ???</li> <li><strong>??????</strong>???</li> <li><strong>??????</strong>?????????????????????/li> <li><strong>????????????????????</strong></li> </ul> <h3>4.2 ????????????</h3> <p>????????????????????????</p> <p><strong>??? 1???????????????</strong></p> <pre class="language-bash"><code># ???????????????????????? cat > /usr/local/bin/gdpr-account-erasure.sh << 'SH' #!/bin/bash # GDPR Art. 17 ??????????????????? # ??????????? # 1. ????????????Art. 12(6)??# 2. ?????????????????rt. 17(3)??# 3. ?????30 ??"????? ??? USER="$1" if [ -z "$USER" ]; then echo "???: $0 <email_address>" exit 1 fi DATE=$(date +%Y%m%d-%H%M%S) LOG="/var/log/gdpr/erasure-${USER//@/_}-${DATE}.log" mkdir -p /var/log/gdpr echo "[${DATE}] GDPR ??????: ${USER}" | tee -a "$LOG" # 1. ????????? ??????????????? # 2. ?????????????????????????????? echo "=== ???????????===" >> "$LOG" doveadm user "$USER" 2>&1 | tee -a "$LOG" # 3. ????????ovecot??doveadm mailbox delete -u "$USER" '*' 2>&1 | tee -a "$LOG" # 4. ???????????????????????if id "$USER" &>/dev/null; then userdel -r "$USER" 2>&1 | tee -a "$LOG" fi # 5. ????????? rm -rf /var/mail/*/"$USER" 2>/dev/null # 6. ??? PostgreSQL/LDAP ???????????????????????# psql -c "DELETE FROM mailbox WHERE username = '$USER';" # 7. ??????????????? # ??????????????bacula???????????????????? echo "=== ?????? ===" | tee -a "$LOG" echo "??? ${USER} ??????????????? GDPR Art. 17 ???????? | tee -a "$LOG" SH # ???????????????Art. 5(2) accountability??# ?????????????????????????chattr +a /var/log/gdpr/</code></pre> <p><strong>??? 2?????????????????/strong></p> <pre class="language-bash"><code># Postfix ????????????????? cat > /usr/local/bin/gdpr-anonymize-logs.sh << 'SH' #!/bin/bash # ????????????????????????????# ????????????????????LOG_DIR="/var/log" for logfile in "$LOG_DIR"/mail.log.*.gz "$LOG_DIR"/dovecot*.log.*.gz; do [ -f "$logfile" ] || continue TMP_FILE="${logfile}.tmp" # ??[redacted] ?????????????????? zcat "$logfile" | \ sed -E 's/[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/[redacted-email]/g' | \ sed -E 's/[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/[redacted-ip]/g' | \ gzip > "$TMP_FILE" mv "$TMP_FILE" "$logfile" done echo "??????????? $(date)" SH</code></pre> <p><strong>??? 3??????????????/strong></p> <p>??? GDPR Art. 17(3)(e) ???????????????????????????????????????</p> <ul> <li>???????????strong>??????</strong></li> <li>???<strong>???????????/strong></li> <li>??strong>????????????????????/strong></li> <li>????????????????????/li> </ul> <pre class="language-bash"><code># ?????????????????cat > /usr/local/bin/gdpr-backup-erasure-manager.sh << 'SH' #!/bin/bash # ??????????????????????????BACKUP_RETENTION_DAYS=90 DELETED_USERS_DB="/var/lib/gdpr/deleted_users.sqlite" # ??????????????? # ??pg_dump / rsync ????????deleted_users ????????? echo "?????????: $(date)" echo "?????????: ${BACKUP_RETENTION_DAYS} ?? echo "" echo "????? ?????????????????????????????..." # ?????????????????????????????? borg prune??SH</code></pre> <h2 id="s5">????????????????</h2> <h3>5.1 ??????</h3> <p>GDPR Art. 33-34 ?????/p> <ul> <li><strong>?????/strong>????????????????????<strong>72 ???</strong>?????????????rt. 33(1)??/li> <li>?????????????????</li> <li>?????????<strong>?????????????????????????/strong>??????<strong>???</strong>??????????????rt. 34(1)??/li> <li><strong>?????/strong>??????????????????????????strong>???</strong>?????????Art. 33(2)??/li> </ul> <h3>5.2 ????????????????????</h3> <pre class="language-bash"><code># ???????????????????cat > /usr/local/bin/detect-mail-breach.sh << 'SH' #!/bin/bash # ??????????????????????? # ??????????? REPORT="/var/log/breach-monitor-$(date +%Y%m%d).log" echo "=== ????????????? $(date) ===" >> "$REPORT" # 1. ???????????????????# Dovecot ?????find ???????????? IMAP FETCH grep "$(date +%H:%M)" /var/log/dovecot.log | \ grep -i "FETCH\|F" | \ awk '{print $NF}' | sort | uniq -c | sort -rn | \ while read count user; do if [ "$count" -gt 100 ]; then echo "[ALERT] ?????????: ${user}: ${count} ??FETCH" >> "$REPORT" fi done # 2. ?????????????????????????grep "$(date +%H:%M)" /var/log/mail.log | \ grep "SASL LOGIN authentication failed" | \ awk '{for(i=1;i<=NF;i++) if($i ~ /^[0-9.]+$/) print $i}' | \ sort | uniq -c | sort -rn | \ while read count ip; do if [ "$count" -gt 10 ]; then echo "[ALERT] ??????: ${ip}: ${count} ????? >> "$REPORT" fi done # 3. ???????SMTP ????????? spam bot??# ??? pflogsumm ??? pflogsumm -d today /var/log/mail.log 2>/dev/null | \ grep -A 20 "Top 50 SMTP senders" >> "$REPORT" echo "=== ??? ===" >> "$REPORT" SH chmod 755 /usr/local/bin/detect-mail-breach.sh</code></pre> <h3>5.3 72 ?????????</h3> <p>????????????????????????</p> <table> <caption>??3???????????72 ???????????/caption> <thead><tr><th>???</th><th>???</th><th>?????/th><th>???</th></tr></thead> <tbody> <tr><td>0-2 h</td><td>????????????????????/td><td>??????</td><td>?????????</td></tr> <tr><td>2-4 h</td><td>???????????????????????/td><td>??????</td><td>?????????</td></tr> <tr><td>4-12 h</td><td>??????????????????????????</td><td>DFIR ???</td><td>??????</td></tr> <tr><td>12-24 h</td><td>??????????????????????????</td><td>DPO / ???</td><td>?????????</td></tr> <tr><td>24-48 h</td><td>??????????????rt. 33??/td><td>DPO</td><td>?????????</td></tr> <tr><td>48-72 h</td><td>??????????????????Art. 34??/td><td>DPO + ???</td><td>??????/????????</td></tr> <tr><td>??2 h</td><td>????????????</td><td>DPO</td><td>?????????????????/td></tr> </tbody> </table> <h3>5.4 ?????????</h3> <p>GDPR ???????????rt. 33(3) ??????????????/p> <pre class="language-text"><code>Subject: Personal Data Breach Notification ??Article 33 GDPR To: [Supervisory Authority Email] Date: [YYYY-MM-DD] 1. ???????? - ???: [Organization Name] - DPO ??????: [DPO email / phone] 2. ?????? - ??????: [Date and time UTC] - ??????: [Date and time UTC] - ??????: [SMTP credential theft / Mailbox unauthorized access / etc.] - ??????: [Postfix SMTP / Dovecot IMAP / Webmail / Backup] 3. ??????????????? - ?????????: [Email content, metadata, attachments, passwords] - ???????????rt. 9?? [Yes/No + description] - ????????????????? [Number] - ???????????????????? [Number] 4. ?????? - [List of potential consequences for data subjects] 5. ?????????????????? - [Mitigation measures taken] - [Planned remediation steps] 6. ?????????????? - [Reasons for delayed notification] --- DPO Signature </code></pre> <h2 id="s6">?????????????????DPIA??/h2> <h3>6.1 DPIA ?????????Art. 35??/h3> <p>GDPR Art. 35 ??????????????????????????????????????????????????????????????????????????????????????????????????????????? DPIA ????????/p> <ul> <li><strong>?????????????????????</strong>????????????/?????/li> <li><strong>?????????????????/strong>?????????????????????</li> <li><strong>????????????</strong>??????????????/li> </ul> <h3>6.2 ?????? DPIA ???</h3> <pre class="language-bash"><code># DPIA ???????????cat > /usr/local/bin/dpia-mail-assessment.py << 'PYTH3' #!/usr/bin/env python3 """ ?????? GDPR DPIA ?????? ?????????????????""" import json dpia_questions = [ { "id": "Q1", "question": "???????????????????????????????????????????", "weight": 3, "critical": True }, { "id": "Q2", "question": "????????????????????????/???/?????, "weight": 2, "critical": True }, { "id": "Q3", "question": "?????????????????5000 ???", "weight": 1, "critical": False }, { "id": "Q4", "question": "????????????????????????????????, "weight": 3, "critical": True }, { "id": "Q5", "question": "???????????????/?????????????????????", "weight": 2, "critical": False }, { "id": "Q6", "question": "??????????????????????????? firstname.lastname@domain???", "weight": 1, "critical": False }, { "id": "Q7", "question": "??????????????????????????, "weight": -1, # ?????????? "critical": False }, { "id": "Q8", "question": "?????????????????????", "weight": -1, # ??? "critical": False } ] def run_dpia_assessment(): print("=== GDPR DPIA ????????? ===") print("????????????y/n??") score = 0 critical_flags = [] for q in dpia_questions: answer = input(f"{q['question']} (y/n): ").strip().lower() if answer == 'y': score += q['weight'] if q['critical']: critical_flags.append(q['id']) elif answer == 'n' and q['weight'] < 0: score += q['weight'] * -1 # ?????????????????? print("\n=== ?????? ===") print(f"??????: {score}") if score >= 5: print("???: ???????????????? DPIA??rt. 35??) elif score >= 3: print("???: ????????????? DPIA") else: print("???: ????????????DPIA ???????????) if critical_flags: print(f"\n???????? {', '.join(critical_flags)}") print("\n?????????:") print("1. ???????????? TLS + ????????) print("2. ????????????????????) print("3. ?????????????????") print("4. ??????????????????") print("5. ??? Pseudonymization ?????????????????") if __name__ == '__main__': run_dpia_assessment() PYTH3 chmod 755 /usr/local/bin/dpia-mail-assessment.py</code></pre> <h2 id="s7">????????????????/h2> <h3>7.1 ??????</h3> <p>????????????????????EEA ?????????????????????????????DPR Chapter V, Art. 44-49???</p> <table> <caption>??4????????????????????/caption> <thead><tr><th>???</th><th>??????</th><th>??????</th></tr></thead> <tbody> <tr><td>????????/td><td>Art. 45</td><td>???????????????????????"?????????????????</td></tr> <tr><td>???????????CC??/td><td>Art. 46(2)(c) + ?????? 2021/914</td><td>????????????????????????????/td></tr> <tr><td>???????????????BCR??/td><td>Art. 47</td><td>?????????????????/td></tr> <tr><td>????????????</td><td>Art. 49(1)(a)</td><td>???????????????????/td></tr> <tr><td>??????????????/td><td>Art. 49(1)(b)</td><td>????????????????????</td></tr> </tbody> </table> <h3>7.2 ???????????IA??/h3> <p>??? EDPB (European Data Protection Board) ??<strong>Recommendations 01/2020</strong>?????? SCC ??????????????????????????????????ransfer Impact Assessment, TIA???</p> <pre class="language-bash"><code># TIA ?????? ??????????????????cat > /usr/local/bin/tia-mail-flow-audit.sh << 'SH' #!/bin/bash # ?????????????????# ????????????????????? echo "=== ?????????????????===" echo "???: $(date)" echo "" # 1. ????SMTP ???????????MX ???????????echo "--- ?????? SMTP ?????????????????---" # ??? pflogsumm ????????? pflogsumm -d today /var/log/mail.log 2>/dev/null | \ grep -E "to=<[^>]+>" | \ awk -F@ '{print $NF}' | sed 's/>//' | \ sort | uniq -c | sort -rn | head -20 echo "" # 2. ????????????? echo "--- ???????????---" curl -s ifconfig.co/json 2>/dev/null || echo "??????" echo "" # 3. ?????????????????????????? echo "--- ?????????????---" # ???????Postfix ??? content_filter ??smtp ??? postconf -n content_filter smtpd_proxy_filter smtp_host_lookup 2>/dev/null echo "" # 4. ???????????? echo "--- ??????????---" echo "????EU SCC ??? v2021 ???????? echo "????DPA????????????????????</code></pre> <h3>7.3 SCC ???????????/h3> <p>??????????????????DPA??????????????SCC ??????</p> <pre class="language-text"><code># Entity-based SCC (Module 2: Controller-to-Processor, EU 2021/914) # ????????????????????????????????? # ????????????? # [ ] Clause 7: ???????????" - ??? Docking Clause # [ ] Clause 8: ?????????????????# [ ] Clause 9: ??????????????????????????????????# [ ] Clause 10: ?????????????????SLA?????Art. 15-22??# [ ] Clause 11: ??????????????edress??# [ ] Clause 12: ?????????????????? # [ ] Annex I A: ??????????????? # [ ] Annex I B: ??????????????????????????????????# [ ] Annex I C: ?????? # [ ] Annex II: ???????????????????????????????????? # ?????? (Schrems II ??: # [ ] TIA ????????????????????? SCC ????????# [ ] ?????????????????/code></pre> <div class="ref-block"> <h3>???????/h3> <ol> <li>Regulation (EU) 2016/679 ??General Data Protection Regulation (GDPR). Official Journal of the European Union, May 2016. Art. 17 (Right to Erasure), Art. 20 (Data Portability), Art. 25 (Privacy by Design), Art. 33-34 (Breach Notification).</li> <li>RFC 8620 ??The JSON Meta Application Protocol (JMAP). IETF, July 2019.</li> <li>RFC 8616 ??Email Mailstore: JSON Meta Application Protocol (JMAP) for Mail. IETF, July 2019.</li> <li>EDPB ??Guidelines 01/2021 on Examples regarding Data Breach Notification (Version 2.0, June 2022).</li> <li>EDPB ??Recommendations 01/2020 on Measures that Supplement Transfer Tools to Ensure Compliance with the EU Level of Protection of Personal Data (Version 2.0, June 2021 / Schrems II).</li> <li>EDPB ??Guidelines 4/2019 on Article 25 Data Protection by Design and by Default (Version 2.0, October 2020).</li> <li>European Commission Implementing Decision (EU) 2021/914 ??Standard Contractual Clauses for the Transfer of Personal Data to Third Countries. June 2021.</li> <li>Article 29 Working Party ??Guidelines on Data Protection Impact Assessment (DPIA) and Determining Whether Processing Is "Likely to Result in High Risk" (WP 248, Rev. 1, October 2017).</li> <li>CJEU ??Case C-582/14 (Breyer) [email address as personal data].</li> <li>M3AAWG ??Email and GDPR: Compliance Considerations for Messaging Providers (2025 Update).</li> </ol> </div> <div class="citation-block"> <h3>引用本文</h3> <p class="citation-format">ztpop.net 知识库编辑. "本文标题" <em>ztpop.net 知识库</em>.</p> <p class="citation-license">本站技术文章采用 CC-BY 4.0 许可，可自由引用，仅需标注来源 ztpop.net。</p> </div> <div class="article-footer"> ?????ztpop.net ??????????????????????????????????<a href="https://ztpop.net/kb/">?????/a>?? <p class="article-license">本站技术文章采用 CC-BY 4.0 许可，可自由引用，仅需标注来源 <a href="https://www.ztpop.net">ztpop.net</a>。</p> </div> </div> </article> <div class="kb-copyright"> © 2026 ztpop.net · ???????????? ztpop.net ????· ???????????? </div> </div> <script type="application/ld+json"> { "@context": "https://schema.org", "@type": "TechArticle", "headline": "?????? GDPR ?????????????????? Privacy by Design ????????, "description": "Privacy by Design ????????FC 8620 JMAP ???????????????DPR ??????????2 ?????????????????PIA ?????????????, "datePublished": "2026-07-24", "dateModified": "2026-07-24", "author": { "@type": "Person", "name": "ztpop.net ???????????" }, "publisher": { "@type": "Organization", "name": "ztpop.net", "logo": { "@type": "ImageObject", "url": "https://ztpop.net/logo.png" } }, "mainEntityOfPage": { "@type": "WebPage", "@id": "https://ztpop.net/kb/gdpr-email-subject-rights-guide.html" }, "speakable": { "@type": "SpeakableSpecification", "xpath": ["/html/head/title", "/html/body/article/div[1]/h1"] }, "breadcrumb": { "@type": "BreadcrumbList", "itemListElement": [ {"@type": "ListItem","position": 1,"name": "???","item": "https://ztpop.net/"}, {"@type": "ListItem","position": 2,"name": "?????,"item": "https://ztpop.net/kb/"}, {"@type": "ListItem","position": 3,"name": "GDPR ???????????????","item": "https://ztpop.net/kb/gdpr-email-subject-rights-guide.html"} ] } } </script> <footer style="background:#f5f5f7;padding:40px 0 24px;margin-top:60px;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif;"> <div style="max-width:1040px;margin:0 auto;padding:0 20px;"> <div style="display:flex;flex-wrap:wrap;gap:48px;font-size:14px;color:#666;line-height:2.2;"> <div style="flex:1;min-width:200px;"> <p style="font-size:13px;font-weight:600;color:#333;margin:0 0 8px 0;letter-spacing:0.5px;text-transform:uppercase;">联系我们</p> <p style="margin:0;">021-69753778</p> <p style="margin:0;">zhangtao@ztpop.net</p> <p style="margin:0;display:flex;align-items:center;gap:8px;"> 微信咨询 <span style="display:inline-block;width:64px;height:64px;background:#fff;border-radius:6px;padding:3px;border:1px solid #e5e5ea;"> <img src="/images/tech-weixin.webp" alt="微信" width="58" height="58" style="display:block;border-radius:4px;" loading="lazy"> </span> </p> </div> <div style="flex:1;min-width:160px;"> <p style="font-size:13px;font-weight:600;color:#333;margin:0 0 8px 0;letter-spacing:0.5px;text-transform:uppercase;">快速导航</p> <p style="margin:0;"><a href="/" style="color:#515154;text-decoration:none;">首页</a></p> <p style="margin:0;"><a href="/depth-understand.html" style="color:#515154;text-decoration:none;">国产邮件系统</a></p> <p style="margin:0;"><a href="/mailgate.html" style="color:#515154;text-decoration:none;">邮件安全网关</a></p> <p style="margin:0;"><a href="/xinchuang_mail.html" style="color:#515154;text-decoration:none;">信创邮件系统</a></p> <p style="margin:0;"><a href="/kb/" style="color:#515154;text-decoration:none;">知识库</a></p> <p style="margin:0;"><a href="/bulletin/industryInfo.html" style="color:#515154;text-decoration:none;">行业资讯</a></p> <p style="margin:0;"><a href="/contact.html" style="color:#515154;text-decoration:none;">联系我们</a></p> </div> </div> <div style="border-top:1px solid #d2d2d7;margin-top:24px;padding-top:16px;text-align:center;font-size:12px;color:#999;line-height:1.8;"> © 2018-2026 上海辰童科技有限公司 | 沪ICP备2024053450号 | 专注国产邮件系统与邮件安全 </div> </div> </footer> </body> </html>