论劳动者个人信息处理的合法性基础

Research on the Legal Basis of Processing Employees’Personal Information

劳动场景有别于一般生活场景,劳资双方在经济地位、技术认知上的非对称性关系所形成的权力势差,极易损害劳动者的个人信息权益。传统告知同意机制在劳动场景中面临着实质要件虚化的困境,劳动者个人信息处理的合法性判定方法逐渐转向"必需"事由这一客观性标准的适用。然而,现行立法模糊的"必需"亦会产生滥用问题,仍难以破解用人单位与劳动者之间的利益冲突。为细化"必需"事由的适用规则,建议采用场景化的分析方法综合考量信息处理活动中的利益与风险,针对用人单位个人信息处理行为的正当性、必要性构建具体的评估测试标准。

The context of labor is different from ordinary life.The asymmetry between employers and the employees in terms of economic status and technology cognition can easily damage employees’personal information rights and interests.The traditional mechanism of“informing and consent”mechanism is facing the predicaments that essential elements exist only in name in real contexts of labor and that the way of judging the legitimacy of processing employees’personal information gradually shift towards the objective standard of being“necessary”.However,the connotation of“necessary”is vague and principled in the current legislation,which makes it difficult to resolve conflicts of interests between employers and employees.To improve the applicability of“necessary”causes,contextual analysis method is suggested,which takes into account the benefits and risks in information processing activities comprehensively.It is also essential to create specific standards of assessment test according to the legitimacy,necessity and proportionality of the employers’personal information processing behaviors.