人脸信息的权利属性、收集原则与法律规制

Attribute of Rights,Principles of Collection,and Legal Regulations on Facial information

数字时代,人脸信息的应用场景越来越广泛,同时面临极大的隐私泄露风险,坚守对人脸的保护底线至关重要。本文基于人脸信息法律属性,梳理欧盟、美国、中国在人脸识别技术应用收集阶段的法律原则,比较三者在目的限制原则、同意原则、数据最小化原则上的共性及差异,为进一步完善人脸信息保护提供建议。在人脸信息的实际应用中,应区分不同场景下的目的类型,完善同意机制,细化最小化原则。

In the digital age,the application scenarios of facial information are becoming widespread and faced with the risk of leakage of privacy.By outlining the legal principles of the EU,the US,and China in the collection stage of facial recognition technology applications and comparing the commonalities and differences among the three on the principles of purpose limitation,consent,and data minimization,this paper provides suggestions for further improving facial information protection,that is to distinguish the types of purposes in different scenarios,improve the consent mechanism,and refine the principle of minimization.