政府数据开放中个人信息保护的范式转变

Paradigm Shift of Personal Information Protection in Open Government Data

政府数据开放并非静态的单一行为,而是动态的系统过程。借助数据生命周期理论,可以将政府数据开放解构为数据收集、转换、存储、公开和使用五个阶段。根据《个人信息保护法》和《数据安全法》确立的最新规则,个人信息保护风险可能同时存在于政府数据开放生命周期的各个阶段。然而,政府数据开放中现有的个人信息保护范式主要采取“基于结果的方法”,重点关注政府数据在公开时的状态,依靠技术性匿名化手段,难以有效应对政府数据开放中的个人信息保护风险。与此相对应,“基于过程的方法”与政府数据生命周期、个人信息保护的程序化和数据安全全流程管理相契合,可以弥补“基于结果的方法”的不足。通过将风险预防原则和程序、技术、经济、教育和法律等手段分散放置在政府数据开放生命周期的每个阶段,能够最大限度减少个人信息保护风险,在个人信息保护与政府数据开放之间实现动态平衡。

Open government data(OGD)is not a static single behavior,but a dynamic system process.With the help of data life cycle theory,open government data can be deconstructed into five stages of data collection,transformation,storage,release,and use.According to the latest rules established by the Personal Information Protection Law and the Data Security Law,personal information protection risks may exist at all stages of the OGD life cycle.However,the existing personal information protection paradigm in OGD mainly adopts an"outcome-based approach",focusing on the state of government data at the time of release,and relying on technical anonymization methods,it is difficult to effectively deal with personal information risks in OGD life cycle.Correspondingly,the"process-based approach"is compatible with the OGD life cycle,the proceduralization of personal information protection,and the full-process management of data security,and can make up for the shortcomings of the"outcome-based approach".By decentralizing risk precautionary principles and procedural,technical,economic,educational,and legal tools at each stage of the OGD life cycle,the risk of personal information protection can be minimized,and a dynamic balance can be achieved between personal information protection and open government data.