论数据、信息与隐私的权利层次与体系建构

On the Right Levels and System Construction of Data,Information,and Privacy

我国法律中的隐私、个人信息具有各自独立的内涵,个人敏感信息的保护范围已由隐私所覆盖,不应成为与之并列的分类方式。个案中的隐私与个人信息应该存在一定的界限,对其厘定需要在个案中予以具体判断。信息、数据在信息学意义上的可分性不等于在法学上的可分性。在个人层面,个人数据就是个人信息,权利客体始终只有个人信息;在数据控制者层面,经过脱敏处理、无法识别或不能直接识别出信息主体的数据,才是财产权的客体。隐私、信息与数据的定性及其上权利定性与体系建构为整个数字社会的存在与发展创造了前提。

Privacy and personal information have separate connotations in Chinese laws,where the protection range of sensitive personal information has been fully entailed within that of privacy;therefore,they should not be parallel categories.Privacy and personal information should share a border line which needs to be specifically defined in individual cases.The division between information and data in informatics does not equal that in law.On the person level,personal data is personal information,so right objects possess personal information only;while on the data controller level,the object of property right refers to the desensitized data that is unidentified,or cannot be directly identified with its information subject.Thus,defining privacy,information,data,and the rights attached to them,as well as constructing the system,created presupposition for the existence and development of the whole digital society.