融合与冲突:区块链技术在个人信息保护体系中的应用

Integration and Conflict:Application of Blockchain Technology in Personal Information Protection System

我国个人信息保护体系以事前保护为基础,事后保护为救济。事前保护以“告知—同意”规则为核心,但规则本身存在缺陷;事后保护以侵权责任兜底,但侵权责任认定存在困难。鉴于区块链技术中新型信任机制可对事前同意进行补足,不可篡改性与事后保护具有高度契合性,为大数据时代个人信息保护体系变革提供了全新视野与方法。区块链技术嵌入个人信息保护体系中需要通过构建主权区块链与重新解释个人信息的“可识别性”的方式进行技术及理论的创新。但技术落地可能遭遇多重挑战,需要平衡区块链的不可篡改性与个人信息更正、删除权的冲突、私钥遗失与个人信息控制权的冲突及加密技术与信息共享的冲突,进而优化夯实个人信息权保护体系的有效运行。

China’s personal information protection system is based on ex ante protection and ex post protection as relief.The core of ex ante protection is the rule of“Notification consent”,but the rule itself has defects;Ex post facto protection is based on tort liability,but it is difficult to identify tort liability.In view of the new trust mechanism in blockchain technology,which can supplement prior consent,tamperability is highly consistent with post protection,providing a new vision and method for the reform of personal information protection system in the era of big data.Blockchain technology is embedded in the personal information protection system,which requires technical and theoretical innovation by building a sovereign blockchain and reinterpreting the“identifiability”of personal information.However,the implementation of technology may encounter multiple challenges.It is necessary to balance the non tamperability of blockchain with the conflict between personal information correction and deletion right,the conflict between private key loss and personal information control right,and the conflict between encryption technology and information sharing,so as to optimize and consolidate the effective operation of personal information right protection system.