个人敏感信息处理规则的省思与完善

Reflection and Improvement of Personal Sensitive Information Processing Rules

当前我国《个人信息保护法》中个人敏感信息的处理规则,在适用过程中存在着一定的局限性:一是法律规定的模糊性;二是法定范围的狭隘性;三是界定标准的宽泛性。鉴于此,可以引用场景理论来完善个人敏感信息的处理规则。以场景理论下个人信息的五要件即信息主体、信息使用者、信息使用目的、信息特性、第三方主体来动态界定个人敏感信息的内涵范围。利用场景理论明确个人敏感信息与个人一般信息相互转化的边界,同时结合特定生活场景目的来确定个人敏感信息的适用范围,进而维持个人信息权益与社会公共利益之间的平衡。

At present,there are some limitations in the application of the personal sensitive information processing rules in China’s personal information protection law:first,the fuzziness of the legal provisions;Second,the legal scope is narrow;third,the broad definition of standards.In view of this,scenario theory can be cited to improve the processing rules of personal sensitive information.The five elements of personal information under the scenario theory,namely,information subject,information user,information use purpose,information characteristics and third-party subject,are used to dynamically define the connotation of personal sensitive information.The use of scenario theory to define the boundary of mutual transformation between personal sensitive information and personal general information,and determine the scope of application of personal sensitive information in combination with the purpose of specific life scenarios,which is conducive to maintaining the balance between personal information rights and interests and social public interests.