比较与启示:欧盟和美国个人信息商业利用规范模式研究

Comparison and Enlightenment: Research on the Normative Modes of Commercial Utilization of Personal Information in the EU and the US

我国目前尚没有专门的个人信息商业利用规范,比较欧盟和美国的相关规范对构建我国个人信息商业利用规范具有重要的借鉴意义。欧盟采取统一立法模式,规定了较完善的个人信息权利,信息利用者有主动保护个人信息权利的义务,设立专门的监管机构负责监管;美国则采取分散立法与行业自律相结合模式,没有明确个人信息权利,其认为保护个人信息并非一概是信息利用者的义务,也未设置统一的监管机构。欧盟模式和美国模式各有所长,我国在构建个人信息商业利用规范时,应当扬长避短,采取立法与自律相结合的模式,借鉴欧盟模式明确个人信息权利,灵活设置信息利用者的风险控制义务、告知义务等,设立专门的监管机构,实现个人信息保护与信息利用的利益平衡。

At present,there is no special specification for the commercial use of personal information in China. Comparing the relevant norms of European Union and USA has important reference significance for the construction of personal information commercial utilization norms in China. The European Union adopts a unified legislative model,which stipulates relatively sound personal information rights. EU law stipulates that information users have the obligation to actively protect personal information rights,and it sets up special regulatory bodies to supervise them. The United States adopts a decentralized legislative model combined with industry self-discipline,without defining personal information rights. In America,information users don’t have the obligation to protect personal information absolutely without a unified regulatory body.The European Union model and the American model have their own advantages. When we construct the norms for the commercial use of personal information,we should make best use of the advantages and bypass the disadvantages and adopt the model of combining legislation with self-regulation. We should draw lessons from the European Union model,for instance,clarifying the rights of personal information,flexibly setting up the risk controlling and notification obligations of information users and establishing special regulatory bodies,to realize the balance of interests between personal information protection and information utilization.