隐私、个人信息、数据三元分治的法理逻辑与优化路径

Privacy,Personal Information and Data: The Jurisprudental Logic and Optimization of the Ternary Divide and Conquer

从范围上看,隐私、个人信息、数据三者之间存在重合,个人信息的范围最大,数据的范围次之,隐私的范围最小。从属性上看,隐私仅具有人格权属性,数据仅具有财产权属性,而个人信息兼具人格权属性和财产权属性。个人信息保护中存在着不同的利益诉求,应把握好数据开发与信息保护之间的平衡。从世界立法演进历程来看,存在着一条从名誉权到隐私权再到个人信息权最后到数据权的发展轨迹。在个人信息保护立法方面,形成了以美国立法为代表的分散立法保护模式和以欧盟立法为代表的统一立法保护模式。二者各有优劣,分别根植于独特的法治体系。我国隐私保护、个人信息保护、数据保护的三元法律体系已初步形成。应通过逻辑自洽的个人信息保护和数据保护法律制度体系实现信息自由和隐私保护并重,通过出台《数字经济促进法》《个人信息保护法实施条例》等处理好个人信息保护立法体系的内部协调与外部衔接,完善关于数据分级分类、权利体系、救济机制等的具体规范。

From the perspective of scope,there is a certain overlap between privacy,personal information and data.The scope of information is the largest,followed by data,and privacy is the smallest.From the perspective of attributes,privacy only has personality attributes,data only has property attributes,and personal information has both personality and property attributes.In the protection of personal information,there are different interests such as personal,corporate and national interests.It is necessary to grasp the balance between data development and information protection.From the evolution of world legislation,it has experienced a development track from reputation rights,privacy rights,personal information rights to data rights.The legislation of personal information protection has formed a decentralized legislative protection model represented by the United States and a unified legislative protection model represented by the European Union.Both models have their own advantages and disadvantages and are rooted in their unique legal systems.A ternary legal system of privacy,personal information and data protection has been initially formed.Freedom of information should be realized through an inherently logical and self-consistent legal system of personal information protection and data.Through the introduction of the“Digital Economy Promotion Law”,“Personal Information Protection Law Implementation Regulations”,etc.,we can handle the internal coordination and external connection of legislative system of the personal information protection and improve the specific specifications such as the classification of data,the system of rights and the relief mechanism.