论个人信息共同处理者的民事责任

On Liability of Processors in the Joint Processing of Personal Information

我国《个人信息保护法》没有区分控制者与处理者,而是继续使用个人信息处理者的概念涵盖个人信息活动的参与者。处理者就是指在个人信息处理活动中自主决定个人信息处理目的和处理方式的组织或个人。个人信息的共同处理者,是指共同决定个人信息处理目的和处理方式的多个处理者。他们对于处理目的和处理方式达成合意或者存在意思联络。因共同处理行为侵害个人信息权益而造成损害的,共同处理者应当依法承担连带赔偿责任,即依据《民法典》第1168条至第1172条的规定来承担连带责任或者按份责任。

China Personal Information Protection Law( PIPL) does not need to distinguish between controllers and processors. The concept of personal information processor should be used to cover the participants of personal information activities. Processor refers to the organization or individual who decides the purpose and method of personal information processing. Joint processors mean that multiple processors who jointly determine the purpose and method of personal information processing. They reach an agreement on the purpose and method of handling or have a connection of intention. In case of damage caused by the infringement of personal information rights and interests by the joint processing act,the joint processors shall be held joint and several liability according to law,that is,they shall be held joint and several liability or share liability according to the provisions of articles 1168 to 1172 of the Civil Code.