证券公司个人信息保护义务:溯源、困境与破局

The Obligation to Protect Personal Information of Securities Company:Source,Predicament and Solution

证券公司的个人信息保护义务发源于银行传统的保密义务,该义务的历史沿革体现证券行业审慎经营的原则和与监管体制密切关联的行业特色。在适当性制度要求与互联网平台兴起等因素的驱动下,证券公司业已成为重要的个人信息处理者,但实践中仍然存在多方面的疏漏与不足。为加强个人信息保护,证券公司应在保护信息自决权的基础上把握不影响基础服务提供、不影响金融安全监管的双重标准,根据关涉的个人信息类型具体界定敏感个人信息范围并取得客户同意,应用情境脉络完整性理论促进自动化决策的公平、公正,切实保障信息删除请求权,从而推动证券行业合规发展。

The obligation to protect the personal information of securities companies arises from the traditional duty of confidentiality owned by banks.The historical development of those duties reveals the rules of prudent operation in the securities industry and the character of the close association with the regulatory system.Driven by the rules of“Know Your Customers”and the springing up of Internet platforms,securities companies have become important personal information processors,but there are still some omissions and weak points in many ways during the procession.In order to strengthen the protection of personal information,securities companies should abide by the standards which include not affecting the supply of fundamental services and supervision of financial security on the basis of protecting selfdetermination rights,and define the scope of the sensitive personal information according to the specific types of information.Besides,companies shall promote the fairness of automation decisions under contextual integrity theory and respond to clients’claims to delete their information to foster the development of the securities industry complying with regulations and laws.