论个人信息保护机构的组织优化——结合《个人信息保护法》相关规则的解释

On the Organizational Optimization of Personal Information Protection Institutions——Based on the interpretation of the relevant rules of the Personal Information Protection Law

个人信息保护机构在法律中呈现出公民人格权益组织保障者、企业自我规制规制者、公权力机关信息处理监督者三重功能定位。现行组织体系在履行功能时分别面临权利保障形式监管缺位与实质目标异化、企业协同治理角色缺失、监管者自我监管客观性欠缺三重缺陷。针对功能履行弊病,应当按照整体性治理原理、合作协同性原理、独立专门性原理对组织模型进行优化。在组织模型的选择中,模仿建构域外独立统一式的监管模型存在实际困境与理论缺陷,应当选择混合分散式的监管模型予以完善。这一模型主要分为三方面:其一是“属地管理”为核心的综合行政执法机构的建置;其二是个人信息保护咨询机构的建构;其三是专门监督国家机关处理个人信息的独立机构建设。

In the law,the personal information protection organization presents three functions:the protector of individual personality rights and interests,the self-regulating regulator of enterprises,and the supervisor of information processing of public power organs.The current organizational system faces three defects respectively in the performance of its functions,namely,the absence of formal supervision of rights protection,the alienation of substantive objectives,the absence of cooperative governance role of enterprises,and the lack of objectivity of self-regulation of regulators.In view of the defects of functional performance,the organizational model should be optimized according to the principles of holistic governance,cooperation and collaboration,and independent specialization.In the choice of organizational model,there are practical dilemmas and theoretical defects in the imitation and construction of the independent unified supervision model outside the region,so we should choose the mixed decentralized supervision model to improve it.This model is mainly divided into three aspects:Firstly,the establishment of integrated administrative law enforcement agencies with“territorial management”as the core;The second is the construction of personal information protection consulting institutions;The third is to supervise the construction of independent institutions that handle personal information by state organs.