《民法典》视野下人脸识别信息的二元保护探究

Research on Dual Protection of Facial Information from the Perspective of Civil Code

在《民法典》隐私权和个人信息二分模式下,人脸识别信息应适用个人信息保护路径抑或隐私权保护路径存有疑问。应根据人脸识别技术不同的应用目的将人脸识别分为“1对1”和“1对N”两种情形,在此基础上讨论人脸识别信息的法律属性和保护路径。在“1对1”情形下,人脸识别信息的个人信息属性较强,应当采取“单独同意+自主控制+提高安全性”的保护路径。在“1对N”情形下,在采集阶段人脸识别信息具有较强的个人隐私属性,应采取“方式合法+目的正当+最小必要”的人脸识别信息采集原则,并且需要得到信息主体的明确同意,从而避免该信息被非法采集;在完成面部特征信息采集之后,人脸识别信息的个人信息属性增强,应当按照个人信息的保护方式对其进行保护。

Within the dichotomy mode of privacy and personal information in the Civil Code,it is doubtful that the protection of face information should be applied to the approach of personal information protection or the approach of privacy protection.Based on different application purposes of face recognition technology,this paper divides face recognition into two scenarios:"1 to 1"and"1 to N",and discusses the legal attributes and protection paths of face information.In the"1-to-1"situation,the personal information attribute of face recognition information is relatively strong,and the protection path of"individual consent,autonomous control,and improved security"should be adopted.In the"1 to N"situation,face recognition information has a strong personal privacy attribute at the collection stage,and the collection principle of"legal method,legitimate purpose,and minimum necessary"should be adopted.Explicit consent should be obtained from the collection subject to avoid the illegal collection of the information.After the collection of facial feature information,the personal information attributes of face recognition information are enhanced,and they should be protected following the protection method of personal information.