人脸识别的法律规制路径

The Legal Regulation Path of Facial Recognition

人脸信息作为全新的ID密匙已经突破传统的法律保护界限和原则,必须探索新的法律规制路径。政府和企业收集人脸信息不等同于隐私侵权,建基于隐私保护基础上的个人同意、人脸数据处理的合理期待和数据空间侵权救济等个人信息保护原则面临智能技术的挑战。借鉴《通用数据保护条例》(GDPR)、《伊利诺伊州生物特征信息隐私法》(BIPA)所确立的书面告知与同意、独立使用和多元救济等原则,我国应确立个人信息自决、"新治理"比例和专项责任审核等人脸识别法律规制原则,平衡数据产业发展与个人信息保护之间的矛盾。

As a new ID key,facial information has broken through the traditional legal protection limits and principles.It is necessary to explore new paths of legal regulation.The collection of facial information by governments and companies is not equivalent to the privacy tort.The principle of personal information protection such as personal consent based on privacy protection,reasonable expectation of facial information processing and data space tort relief is challenged by intelligent technology.Reference to the principles of written notice and consent,independent use and multiple remedies established by General Data Protection Regulation and Illinois Biometric Information Privacy Act,we should establish legal regulation principles of facial recognition,such as the self-determination of personal information,the proportion of New Governance and the special responsibility audit,so as to balance the contradiction between the development of data industry and the protection of personal information.