个人信息保护原理之辨:过程保护和结果保护

The Distinction of Personal Information Protection Principles:Protection by Process and Protection as a Result

"过程保护"模式和"结果保护"模式是诠释和理解我国个人信息保护原理的重要视角。在过程保护模式中,个人参与乃至主导信息处理过程,这是以民法保护方式为基础,由补强型规则和削弱型规则共筑的保护理念;结果保护模式则是由公法限定个人信息可被处理的广度和深度以防止信息过度开采,从而于结果上保障个体的人格尊严价值或国家社会公共利益,这分化出社会控制论和国家保护义务论两种公法思路。在立法实践中,这两个模式不是排他互异,而是在不同的信息处理规则项下错落有致地组合,合力形成公私法共生的保护方式。

The“protection by process”model and“protection as a result”model are instructive perspectives for interpreting and understanding the principles of personal information protection in China.On the one hand,in terms of the“protection by process”model,it is the data subject that dominates the information processing process,which is based on the civil law method and supplemented by reinforcing rules and weakening rules.On the other,the“protection as a result”model requires the public law to limit the breath and depth of information processing,so as to prevent over-exploitation of personal information,thereby protecting the individual’s personal dignity value or the national and social interest.This model can be divided into social control and the state’s duty of protection theories.In legislative practice,these two models are not exclusive in effect.Under different information processing rules,they are combined in corresponding manners,which reflects the symbiosis of the public and civil law for the protection of personal information.