个人信息保护制度中告知同意原则的法理阐释与规范建构

Jurisprudential Interpretation and Normative Construction of the Principle of Notice-and-Consent in the Personal Information Protection System

《个人信息保护法》确立了以告知同意原则为核心的个人信息保护制度,但告知同意原则的实际效果一直遭到质疑,这主要是由于信息技术和商业模式的发展对“实质性告知同意”产生了障碍。对此,有必要重申人格尊严作为告知同意原则的理据,并充分认识到“信息茧房”“数据权力”以及“个人信息价值对于个体和对于群体的巨大差异”对实现人格尊严的影响。在此基础上,告知同意原则理论的三大支柱包括:实现个人信息保护和信息自由流动的平衡、提升个人用户的数字理性、范围和边界的确定是分层次和动态化的。相应地,应当以“实质性参与”作为规范完善的路径取向:明确“知情、同意、撤回、删除、更正”的权利体系,保障多方参与的程序机制,建立多样化的纠纷解决机制和法律责任体系。围绕告知同意原则的这一完善思路,对于构建共建共治共享的网络治理格局也有所启发。

The Personal Information Protection Law establishes a personal information protection system with the principle of notice-and-consent as the core,but the actual effect of this principle has been questioned,mainly due to the development of information technology and business models that have created obstacles to"substantive noticeand-consent".In this regard,it is necessary to reaffirm the rationale of human dignity as the principle of informing consent,and fully recognize the impact of"information cocoons","data power"and"huge differences in the value of personal information for individuals and groups"on the realization of human dignity.On this basis,the three pillars of the principle of consent include:to achieve a balance between personal information protection and the free flow of information,to enhance the digital rationality of individual users,and to determine the scope and boundaries of the hierarchy and dynamics.Correspondingly,"substantive participation"should be used as a standardized and perfect path orientation:clarify the rights system of"knowing,consenting,withdrawing,deleting,and correcting",ensure the procedural mechanism of multi-party participation,and establish a diversified dispute resolution mechanism and legal responsibility system.This perfect idea around the principle of notice-and-consent is also enlightening for the construction of a network governance pattern of co-construction,co-governance and sharing.