论对《网络安全法》第67条中“个人信息”的理解

A Discussion of the Definition of “Personal Information” in the Network Security Law

《网络安全法》第67条中采用"概括+列举"的方式对个人信息做出了界定,但是操作性存在争议,如何对"包括但不限于""结合""识别"等用语进行界定,是需要进一步厘清的问题。本文结合个人信息保护的立法宗旨,以及文义分析,寻求有效划分个人信息和非个人信息界限的路径,从推动权利保护和产业发展平衡的角度,以实践运用场景为分析基础,确立《网络安全法》对个人信息的边界范围。

Personal information is defined in the Network Security Law by both ways to summarize and enumerate,but there are still confusions.The definition itself,and the words of which,"including but not limited to"combination"and"recognition"have rich perspectives to understand.This article tries to analyze the definition itself as well as the Keywords in the definition to reasonably distinguish personal information from non-personal information,and to describe the legal scope of the Network Security Law by considering the legislation objective.From the perspective of keeping the balance of rights protection and industrial development,based on the analysis of practical application scenarios,this paper puts forward some suggestions for reasonably defining the scope of personal information.