个人信息保护制度的重构:由公地悲剧模型展开

Reconstruct the Personal Information Protection Regime: A Narrative Based on the Tragedy of the Commons

信息技术的发展不仅创造了巨大的社会财富,也带来诸如个人信息的过度收集、滥用、泄露等问题,威胁着用户的合法权益。个人信息保护的传统路径是通过向信息主体赋权,要求企业承担保护个人信息的义务。然而这种方式在实践中未能为个人信息提供有效保护。数据泄露等问题不仅会损害用户的合法权益,而且会打击用户对于企业的信任,降低其共享个人信息的意愿,进而影响企业的发展。这种现象可被视为信息经济中的"公地悲剧"。为了实现信息产业的可持续发展,需要兼顾个人与企业的利益,鼓励企业在信息治理中扮演更加重要的角色,实现个人信息保护领域的共治。

Information technology not only generates tremendous social wealth,but also results in issues ranging from over collection and abuse of personal information to data breaches,which puts the user’s interest in peril.The traditional approach to protecting personal information relies on empowering individuals and imposing obligations on companies.However,this approach fails to offer effective protection in practice.Besides harming the user,issues like data breaches also impair the user’s trust in companies,which in turn reduces their willingness to share personal information and harms the companies themselves in the long run.Such phenomenon could be deemed to be "the tragedy of commons" in information economy.For the sustainable development of information industry,we should integrate the interest of individual users and that of companies,encourage companies to play a more active role,and reach co-governance in protecting personal information.