网络产业发展与个人信息安全的冲突与调和——以个人网上行为信息为视角

The Conflict and Reconciliation between Development of Network Industry and Personal Information Security: from the Perspective of Personal Network Behavior Information

大数据冲击了现行个人信息保护法的理念和制度设计,限制收集和使用原则已无法平衡网络产业发展和个人信息安全之间的冲突。受保护的个人信息应突破识别性的限制,将个人网上行为信息纳入保护的范围。个人网上行为信息归属于作为数据"制造者"的行为人。网络服务商应遵循网络用户没有明确反对即可以收集和使用个人网上行为信息的原则。个人信息保护法应赋予权利人删除权,并设定技术保护机制支撑权利人的控制权,最终实现个人信息安全和网络产业发展之间的平衡。

Big data has a great impact on the concept and system design of existing personal information protection act. The limited collection and using principle is unable to balance the conflict between network industry development and personal informa- tion security. The protected personal information should break through the limitation of identification, and incorporate the information of personal network behavior into the scope of protection. The information of personal network behavior belongs to the doer of data ＂maker＂ . Network service providers should follow the principle that personal network behavior information can be collected and used if the network users have no clear objection. Personal information protection act should give the delete right to obligee, and establish a technical protection mechanism to support the control right of obligee, in order to realize the balance between personal information security and network industry development.