我国特定身份信息的界定

Definition of Specific Identity Information in China

特定身份信息是敏感个人信息的一类,首次出现在我国《个人信息保护法》中,却未作界定,其他规定中无相似概念。科学界定特定身份信息事关个人信息权益边界、合规义务内容、监管部门权力范围和法官自由裁量空间。该概念外延广,欧盟、美国、日本、韩国的法律在敏感个人信息界定中列举的特定身份信息种类多样,且欧盟成员国法律、日本内阁令使用补充规定或定义等方式进行进一步界定。比较分析域外列举种类和界定方式,考虑我国现实需要,使用定义加列举的方式界定特定身份信息,将种族、民族、身份证件及身份证件号码、宗教信仰、犯罪记录纳入其范围,对身份证件号码和犯罪记录进行定义,并借助场景理论将特定身份信息敏感程度与具体处理场景关联,使静态列举和动态评估形成互补。

Specific identity information is a category of sensitive personal information,which first appeared in Personal Information Protection Law,but it is not defined,and there is no similar concept in other regulations. A scientific and clear definition of specific identity information relates to the boundaries of personal information rights, the content of the compliance obligations, the scope of power of the supervisory authority, and the discretion of the judge. The extension of this concept is wide. There are various types of specific identity information listed in the definitions of sensitive personal information in the laws of the European Union,the United States,Japan and South Korea. Moreover,the laws of EU member states and the Cabinet Order of Japan are further defined by means of supplementary provisions or definitions. By comparing and analyzing the types and definitions in the above-mentioned regulations, with regard to the actual needs of China, the article defines specific identity information in the form of definition and enumeration,including race,ethnicity,identity certificate and number,religious belief and criminal record,and provides the definitions of identity certificate number and criminal record.Based on context theory, it associates the sensitivity of specific identity information with specific processing scenarios,making static enumeration and dynamic evaluation complement each other.