人脸识别信息收集与使用过程中知情同意原则的修正

On the Amendment of the Principle of Informed Consent in the Collection and Use of Facial Recognition Information

人脸信息是大数据背景下蕴含发展红利的潜力资源。经由人像采集技术收集而成的人脸面部特征信息属于“个人敏感信息”的范畴,在信息收集、共享、传输、分析和存储方面应当设定比个人一般信息更高的保护门槛。现行法律框架构建了以知情同意原则为基石的个人信息保护制度,但该原则的适用在人脸识别技术的应用场景中局限于形式上的同意,或由于地位的不对等、技术非对称性而被掏空同意内核。鉴于此,必须在坚守知情同意原则首要正当性来源的前提下根据人脸信息的特征对其进行局部修正,保障知情基础,建立标准化的司法风险评估制度,严格限制人脸信息的社会控制,增加特殊删除请求权,扩展数据安全的公益诉讼内容,以回应大数据时代公民信息流动和保护的正当需求。

Facial information is a potential resource with development dividends in the context of big data.Collected by facial recognition technology,facial information belongs to the category of“sensitive personal information”and should be set at a higher threshold of protection than ordinary personal information in the collection,sharing,transmission,analysis and storage of information.The current legal framework has constructed a personal information protection system with the principle of informed consent as the cornerstone,but the application of the principle is limited to formal consent in the application scenario of facial recognition technology,or the kernel of consent is hollowed out due to the unequal status and technical asymmetry.In view of this,it is necessary to partially amend the principle of informed consent based on the characteristics of facial information while adhering to its primary source of legitimacy,safeguard the informed basis,establish a standardized judicial risk assessment system,strictly limit the social control of facial information,increase the right to special deletion requests,and expand the content of public interest litigation for data security,in order to respond to the legitimate needs of citizens'information flow and protection in the era of big data.