个人信息概念的法教义学分析——以《网络安全法》第76条第5款为中心

Theconcept of personal information in legal dogmatics angle:Focusing on Article 76( 5) of the Cybersecurity Law

从个人信息的称谓看,个人信息与个人数据(资料)概念可以等同,而个人信息与个人隐私之间存在较大区别。《网络安全法》第76条第5款采用个人信息的称谓,并以"识别型"及"概括列举型"的立法模式定义个人信息。对这一定义亦应作广义解释。具体而言,个人信息具有"识别"与"记录"两个要素。其中,"识别"属于实质要素,需结合识别的判断基准、信息相关性、识别可能性三个方面予以判断。而"记录"属于形式要素,没有记录在载体之中的信息不是个人信息。

The concepts of personal information and personal data have no significant difference, while there is a huge distinction between the concepts of personal information and personal privacy. Article 76( 5) of the Cybersecurity Law takes the name of personal information and defines personal information in the form ofidentification type and generalization & enumeration type. This definition should be broadly interpreted.Specifically,personal information has two elements,which are identification and record. Identification is a substantive element, to be combined with the criteria for judgments, the relevance of information, the possibilities of identification. Record is a formal element, and unrecorded information is not personal information.