人脸识别信息保护中的同意规则研究

Research on Consent Rules in Face Recognition Information Protection

人脸识别技术的研发与应用是数字社会发展的必然,当个人的身份从熟人社会的“看出来”到数字社会的“刷出来”的识别机制转变,以同意规则为核心构建的传统个人信息保护体系呈现适用困境。人脸识别信息属性的变动性、应用场景的复杂性、安全风险的持续性是导致同意规则失灵的深层缘由。考量人脸识别技术持续的分析对比和复杂的应用场景,有必要深入到具体场景对同意规则加以重塑,具体而言:以必要原则作为人脸识别技术应用的检验标准,在收集阶段,以公私主体的不同建立差异化的概括同意模式;在利用阶段,以风险评估为手段建立持续的信息披露与分级同意的动态同意模式,通过优化同意规则的整体架构降低人脸识别技术对个人持续分析识别的风险。

The development and application of face recognition technology is inevitable in the development of the digital society. When an individual’s identity changes from the “spotting”identification mechanism in the acquaintance society to the “scanning” in the digital society, the personal information proection system built with consent rules as the core presents an applicable dilemma. The variability of face recognition information attributes, the complexity of application scenarios, and the persistence of security risks are the reasons for the failure of consent rules.Considering the continuous analysis and comparison of face recognition technology and complex application scenarios, it is necessary to reshape the consent rules in consideration of specific scenarios. Specifically: use the necessary principle as the test standard for the application of face recognition technology, in the collection stage, establish a differentiated generalized consent model with different public and private subjects in the collection stage;in the utilization stage, a dynamic consent model of continuous information disclosure and graded consent is established by means of risk assessment to reduce the risk of face recognition technology for continuous analysis and identification of individuals by optimizing the overall structure of the consent rules.