政府强制公开个人信息的技术区分保护的策略

Technical differentiation protection strategy for mandatory disclosure of personal information by the government

《中华人民共和国政府信息公开条例》第15条确定了行政机关基于公共利益的考量,违背信息主体意志而强制公开个人信息的合法性。而技术区分保护的策略成为平衡政府信息公开与个人隐私信息保护的重要途径。在分析技术区分保护的法律基础、内涵、价值与考量因素的基础上,提出了个人信息技术区分保护的策略。首先,行政机关应将政府持有的个人信息根据内容分为十一大类,并根据个人信息涉及隐私的程度分为高度、中度、轻度三个等级。其次,在此基础上运用失真、加密、匿名化等隐私保护技术对强制公开的个人信息进行区分处理。最后,经技术处理的个人信息被强制公开后,还应采取目的限制、禁止再识别等安全保障措施,降低个人信息被识别的风险,进一步保障信息主体的隐私权益。

Article 15 of the Regulations on the Disclosure of Government Information of the People’s Republic of China determines the legitimacy that the administrative organ can violate the will of the main body of information and force the disclosure of personal information in consideration of the public interest.The technical differentiation protection strategy has become an important way to balance government information disclosure and personal privacy information protection.Based on the analysis of the legal basis,connotation,value and consideration factor of technical differentiation protection,this paper puts forward the technical differentiation protection strategy of personal information.First of all,the administrative agency should classify the personal information held by the government into eleven categories according to the content,and divide it into three levels:high,medium and light according to the degree of privacy of personal information.Secondly,on this basis,privacy protection technologies such as distortion,encryption,and anonymization are used to differentiate the mandatory disclosure of personal information.Finally,after the personal information processed by the technology is forcibly disclosed,security measures such as restriction of purpose and prohibition of re-identification should be taken to reduce the identified risks and further protect the privacy rights of the information subject.