国家机关处理个人信息的特殊风险及其法律规制

Special Risks and Legal Regulations of Government Agencies Dealing with Personal Information

国家机关作为我国数据资源的最大掌控者,在履行法定职责过程中涉及大量个人信息的处理。国家机关处理个人信息存在处理失控、处理泛化、信息监控和信息泄露等特殊风险,但我国现有立法对国家机关处理个人信息所涉及的特殊风险缺乏足够多的有实际约束力的制度设计。面对国家机关处理个人信息的特殊风险,针对我国现有立法对国家机关处理个人信息法律规制的不足,国家机关处理个人信息的法律规制应从细化国家机关处理个人信息的告知义务、规范国家机关对个人信息处理的授权、明确国家机关处理个人信息的比例原则、强化国家机关处理个人信息的安全保障义务、建立国家机关个人信息处理的分级机制等五个方面展开。

As the largest controller of China s data resources,state organs are responsible for the processing of a large amount of personal information in the performance of their legal duties.There are special risks in the processing of personal information by state organs,such as loss of control and generalization in processing,insufficient information monitoring and information leakage.However,China s existing legislation lacks enough effectively-binding system design for the special risks involved in the processing of personal information by state organs.In the face of those risks,the legal regulation of state organs dealing with personal information should be based on the following five aspects.The disclosure obligation of state organs dealing with personal information is to be refined;the authorization of state organs for personal information processing is to be standardized;the principle of proportion of state organs in processing personal information is to be clarified;The security obligation of state organs in processing personal information is to be strengthened;a hierarchical mechanism for personal information processing of state organs is to be established.