个人信息处理中的“同意”与“同意撤回”

‘Consent’ and ‘Consent Withdrawal’ in the Processing of Personal Information

告知同意是个人信息处理中对个人信息权益的基本保护模式。告知属于兼具公法及私法性质的行为,而同意属于私主体对自己个人信息权益的处分。由于告知同意存在诸多问题,引入同意撤回制度是我国个人信息保护体系的应有之义。同意撤回权与消费者撤回权不同,同意撤回权属于人格权体系下的撤销权,其撤销行为不具有溯及力也不应适用除斥期间,除个人信息主体存在故意或重大过失外,不应令其承担损害赔偿责任。另外,在适用中应当注意厘清主体行使同意撤回权后与受托人及第三方的关系,充分借鉴和吸收其他国家在同意撤回权上的经验,构建我国的同意撤回权体系。

Notification consent is the basic protection mode for the rights and interests of personal information in the processing of personal information. Notification is an act with the natures of public law and private law, and consent belongs to the private subject’s disposition of his own personal information rights and interests. Because there are many problems in notification consent, the introduction of the consent withdrawal system is the right meaning of personal information protection system in China. Unlike consumers’ right to withdraw, the right of consent withdrawal belongs to the right of revocation under the system of the personality right, and its revocation is not retrospective and should not be applied to the scheduled period, except for intentional or gross negligence on the part of the subject of personal information, it should not be liable for damages. In addition, attention should be paid to clarifying the relationship between the subject and the trustee and third party after exercising the right of consent withdrawal, fully drawing on and absorbing the experience of other countries in the right of consent withdrawal, and constructing the system of the right of consent withdrawal in China.