大数据运用中再识别行为的法律规制

Legal Regulation of Re-Identification in the Application of Big Data

大数据时代,个人信息保护具有不同于小数据时代的特点,去识别虽然协调了数据利用与数据保护之间的矛盾,但大数据运用中再识别行为给去识别的个人信息保护带来新的风险和挑战,对再识别行为的立法规制是大数据时代个人信息保护的法治需求。在大数据运用中,应对再识别行为的适用范围、适用主体进行限制,同时赋予数据控制者保护个人数据不被识别的义务和责任。

Characteristics of personal information protection differ between the era of big data and the era of small data.Although de-identification coordinates the contradiction between data utilization and data protection,the re-identification in the application of big data brings new risks and challenges to the personal information protection.The legislative regulation of re-identification is the legal demand for personal information protection in the era of big data.In the application of big data,the scope and subject of re-identification should be limited,and the data controller should be invested with the obligation and responsibility to protect the personal data from being identified.