健康码应用中个人信息权益受损风险与救济

Risks and Remedies of Damaging the Rights and Interests of Personal Information in the Application of Health QR Code

健康码是政府通过数据治理的个案典范,在疫情防控中发挥了重要作用,但同时也存在导致个人信息权益受损的风险。在健康码的应用中,政府依靠企业的技术进行个人信息处理,政府是个人信息处理者,企业是受托人。对于政府而言,政府依职权处理个人信息的行为违法,权利人可以根据《行政诉讼法》和《国家赔偿法》获得救济。对于企业而言,作为受托人原则上不对外承担责任,除非违反《个人信息保护法》第21条和第59条明确规定的个人信息保护义务,受托人就该处理行为应被视为个人信息处理者,并承担《个人信息保护法》所规定的相关责任形式。

Health QR code is a case example of governmental governance through data,which plays an important role in epidemic prevention and control,but there is yet a risk of damaging the rights and interests of personal information.In the application of health QR code,the government relies on the technology of enterprises for personal information processing.The government is the personal information processor and the enterprises are the trustees.For the government,it is authorized to deal with illegal behavior involving personal information,and the obligee can get remedies according to Administrative Procedure Law and State Compensation Law.For enterprises,they do not assume external responsibility as trustees in principle,and except that they violate the personal information protection obligations specified in Articles 21 and 59 of the Personal Information Protection Law,the trustees shall be deemed as a personal information processor in respect of the processing behavior and to bear the relevant forms of responsibility stipulated in Personal Information Protection Law.