个人信息保护中目的拘束原则之适用

Application of the Principle of Purpose-Binding in the Protection of Personal Information

目的拘束原则是平衡个人信息保护与利用的重要原则,但其应有的功能因为大数据时代下信息控制者和信息主体利益与力量存在巨大差距、信息控制者告知义务履行僵化的原因未能实现。借鉴他国经验,可以采取宽进严出的形式对目的进行解释,同时采取对告知义务进行隐私风险评估,使目的拘束原则实现其价值。

The purpose-binding principle is an important principle to balance the protection and use of personal information.However,its due function failed to realize due to the huge gap between the interests and strengths of the information controller and the information subject in the era of big data,and the reason for the rigid performance of the information controller’s notification obligation.Drawing on the experience of other countries,the purpose can be explained in the form of lenient entry and strict exit,and at the meantime,the privacy risk assessment of the obligation of notification can be adopted to realize the value of the purpose-binding principle.