《个人信息保护法》下国家机关之功能角色——基于公法权利保护观点

Die funktionelle Rolle der staatlichen Beh?rden im Rahmen des Gesetzes zum Schutz personenbezogener Daten——aus der Perspektive des Schutzes der?ffentlich-rechtlichen Rechte

2021年8月20日通过的《中华人民共和国个人信息保护法》作为第一部完整规范公民信息处理使用限制之法规,相对《民法典》人格权编之规定,大规模参考了《欧盟通用数据保护条例》。就国家机关各类个人信息处理行为,相对一般私主体设定独立合法性基础。相对于传统民法私权保障模式,在草案通过前夕,有必要建立宪法上个人信息自决权作为该草案之基础,俾确立国家机关在个人信息保护法下作为信息处理者之功能角色。观察德国《联邦个人信息保护法》及我国台湾地区个人资料保护有关规定,皆是在该信息自决权框架下的具体化展现,借以同时兼顾行政机关任务履行及个人信息权益之保障。特别是关于公务机关个人信息的收集及传递行为,区分是否为敏感性信息,以及是否为目的外利用,为多层次的细腻化规定,规范逻辑相对清晰一致,对于《个保法》有积极的借鉴意义。

Personal Data Protection Act of PRC was passed on 20.Aug.2021.As the fundamental legal framework of personal data protection,it demonstrates great ambition at regulating all kinds of behavior forms of state agencies by dealing with the personal data compared to civil code.While there is already lots of discussions concerning the foundation of data protection in the field of civil law,less attention is attributed to its constitutional foundation.This article asserts the positive meaning of widely accepted concept of"informative right of self-determination"under German and Chinese Taiwan’s jurisdiction.Only with the constitutional foundation the conflicting interests between state agencies and citizens could appropriately be balanced in statute.Under these circumstances the legal requirements related to allocation and transmission of personal data will be thoroughly investigated.