反兴奋剂活动中个人数据保护的研究

Protection of Personal Data in Anti-Doping Activities

个人数据不同于传统隐私,是指所有能直接或间接识别到个体的数据。无论是欧洲法下的人格尊严和人格自由,抑或是美国法下的财产控制都强调个人对自身数据的支配。反兴奋剂活动有赖个人数据的充分供给和处理,各国数据保护法的相继出台引发了公众对个人数据权利的更多关注,也给反兴奋剂活动带来了深刻挑战。尽管世界反兴奋机构(WADA)也在努力回应并试图完善个人数据保护,但反兴奋剂活动中的个人数据处理依然与数据保护存在矛盾。在数据处理的合法性方面,虽然反兴奋剂组织处理数据形式上经过了数据主体的知情同意,但体育组织和运动员天然的实力差距导致此种知情同意无论是在"充分知情"抑或"自愿同意"方面都饱受质疑。"公共利益说"虽一定程度上弥补了同意的缺陷,但因反兴奋剂活动的私法性质,导致其也无法真正成为数据处理的合法性基础。在数据处理的行为相称性方面,反兴奋剂活动不符合行为相称性所要求的必要性原则和目的限定原则。平衡反兴奋剂活动中数据处理和个人数据保护,可引入合法利益豁免,构建平衡测试机制,解决数据处理合法性问题。赋予运动员知情权、被遗忘权、有限的拒绝权、访问权和更正权等数据权利,建立数据安全和数据处理的监督和救济程度,加强对数据主体的保护,以符合数据保护法的标准。

Personal data is different from traditional privacy and it refers to all data that can directly or indirectly identify individuals. Both the strict dignity and personal freedom under the European law and the property control under the American law emphasize the individual’s control over their own data. AntiDoping activities depend on the full supply and processing of personal data. The promulgation of data protection laws in various countries has aroused more public attention to personal data rights,and also brought profound challenges to Anti-Doping activities. Although the World Anti-Doping Agency is also trying to respond to and improve personal data protection,there are still contradictions between personal data processing and data protection in Anti-Doping activities. In terms of the legitimacy of data processing,although the Anti-Doping organization processed data in the form of informed consent from the data subject,the natural strength gap between sports organizations and athletes led to such informed consent being questioned both in"fully informed"and"voluntary consent". Although the theory of public interest makes up for the defect of consent to some extent,it cannot really become the legal basis of data processing because of the private law nature of Anti-Doping. In terms of behavioral proportionality in data processing,Anti-Doping activities do not meet the principles of necessity and purpose limitation required by behavioral proportionality. To balance data processing and personal data protection in Anti-Doping activities,we can introduce legal interest exemption,build a balance test mechanism,and solve the problem of data processing legitimacy. Give athletes the right to know,the right to be forgotten,the limited right to refuse,the right to access,the right to correct and other data rights,establish the degree of supervision and relief of data security and data processing,and strengthen the protection of data subjects to meet the standards of data protection law.