在分享和控制之间 数据保护的私法局限和公共秩序构建

Between Sharing and Control The Limitations of Private Law and the Building of Public Order in Data Protection

目前法学界在数据问题的研究上,存在着对传统法律理论(尤其是私法)予以机械适用的路径依赖现象,而缺乏对于“数据”这一新型法律对象在理论和立法模式构建上的有效创新。现有理论倾向于在私法上通过赋予个人或企业某种“数据权利”来建立数据归属和利用秩序,这种理论尝试遇到了私法理论局限的制约和数据应用实践的挑战。数据作为天然的公共品服从固有的互惠分享的原理,在此基础上数据法理论应实现思维模式上的转换,即实现从基于稀缺的法律到基于充裕的法律、从私益保护面向到公益保护面向和从数据控制的强化到数据控制的谦抑的观念转变,由此在确立“分享”作为数据法基本价值取向的理论前提下,探讨数据受局部控制的正当理由,以此涵摄现有的各种数据控制理论学说,并消除现有理论上各种“权利”之间的冲突。通过“分享—控制”一体化理论结构,在立法上可以完善相关制度以释放分享的潜力,并在严格确定数据控制理由的基础上构建公法上系统的数据公共秩序。

At present,the legal research on data protection has a path dependence phenomenon. Traditional legal theory (especially private law) is applied mechanically,but the effective innovation in theo retical analysis models and legislative construction of data,a new legal object,is lacking. Current theo ries tend to establish order of data attribution and utilization by giving individuals or businesses Mdata rights” in private law. These attem pts encountered constraints of private law theory’s limitations and data application practiced challenges. Data is a natural pure public good which should be subject to the inher ent principle of reciprocal sharing. On the basis of this principle,the theory of data law should realize par adigm shifts from the concept of scarce-based law to the abundance-based law,from the protection of private interests to the protection of public welfare,and from the strengthening of data control to the modestly restriction of data control. Under the premise of establishing “sharing” as the basic value orientation of data law,the system of reasons for the partial control of data should be established to capture existing theories of data control and to eliminate conflicts between various “rights” in current theories. Through the “share-and-control” integrated theoretical stru ctu re,the relevant legislation can be improved to release the potential of sharing,and the data public order of public law can be constructed on the basis of narrowing the grounds for data control.