“脱离算法自动化决策权”的虚幻承诺

The Illusory Promise of the Right not to be Subject to Automated Decision-Making

欧盟通用数据保护条例(GDPR)第22条应作权利而非禁令解,由此产生的“脱离自动化决策权”存在与“更正权”竞合之表象、与“获解释权”补强之曲解以及与“被遗忘权”混同之误判。界定该权利应把握两条主线:(1)GDPR序言第71条赋予数据主体的三种基本权利乃相互并列而非互为因果;(2)权利内涵随技术发展嬗变,在基于数据库编码的计算机自动化场景为脱离数据采集,在基于机器学习的算法自动化场景为脱离用户侧写,在基于神经网络的超级自动化场景为脱离平台交互。破除权利失语的关键在于适用条件去场景化以及自甘风险式的豁免进路让位于实现公共利益所必须的法定许可。若不囿于既定框架,陈情权和离线权的重构思路各有合理之处,但应防范可能产生过高的社会成本。

The very nature of GDPR Article 22 is supposed to be a right,not a prohibition;yet the right not to be subject to a decision based solely on automated decision-making conveniently confuses with the right to erase,the right to be provided with an explanation and the right to be forgotten.There are two critical paths to understand this right:(1)Recital 71 of GDPR has provided three fundamental rights for the data subject to protect their legitimate interests;in between these three rights there is no reciprocal causation but degree ascension.(2)the right itself varies in different scenes,it may mean not to be subject to data collection,not to be subject to profiling or not to be subject to platform interaction according to different technological contexts.To break the illusory promise of the right not to be subject to automated decision-making,the Assumption of Risks alike exemption conditions should give way to statutory permit aiming to increase public well-being.To think outside the GDPR’s box,the right to be heard and the off-line right both revealed a practical path for the application of the right,so far as the social cost could be maintained in a proper manner.