私密信息与敏感个人信息区分保护论

The Distinguished Protection of Private Information and Sensitive Personal Information

《民法典》将个人信息划分为私密与非私密信息,《个人信息保护法》却将个人信息划分为敏感与非敏感个人信息,这种立法上的不同概念选择导致了以这些概念为基础构造的具体法律规则在适用上存在衔接问题。对此,在明确现行法对私密信息与敏感个人信息采区分保护立场的前提下,应将私密信息和敏感个人信息在内涵外延上的关系界定为并列但交叉的关系,并以此为基础将对二者的保护划分为三个领域:对私密信息以《民法典》确立的隐私权保护规则与个人信息保护规则进行“双层保护”;对敏感个人信息以《个人信息保护法》确立的敏感个人信息保护规则进行“特别保护”;对重叠部分的“敏感私密信息”,应以立法者通过《民法典》第1034条第3款及《个人信息保护法》第二章第二节所彰显的充分保护与人格尊严、人格自由发展密切相关的个人信息的立法目的为依归,通过目的解释扩张《民法典》第1034条第3款,从而在隐私权保护规则与个人信息保护规则不一致时,选择对敏感私密信息更充分、更有力的保护规则,以实现立法者充分保护个人核心私密领域之基本尊严与自由的目标。

The Personal Information Protection Law classifies information into sensitive and non-sensitive personal information.In contrast,Civil Code divides information into private and non-private information.This different choice of concepts in the legislation also leads to the problem of the application of specific legal rules constructed based on these concepts.In this regard,on the premise that the law currently in force adopts a differentiated position on the protection of private information and sensitive personal information,and recognizing the intersection between private information and sensitive personal information,the protection of both is divided into three areas based on this approach,and using a combination of semantic,systemic and teleological interpretations,we conclude that different legal rules should be applied in different areas for protection.“Two-tier protection”for private information through the rules on the protection of privacy and personal information established by Civil Code;“special protection”for sensitive personal information through the special rules on the protection of sensitive personal information established by the Personal Information Protection Law.With regard to the“sensitive private information”that overlaps with private information and sensitive personal information,the legislator shall aim to fully protect personal information that is closely related to human dignity and the free development of human personality,which is the basic legislative purpose manifested in Article 1034,paragraph 3 of the Civil Code and Chapter 2,Section 2 of the Personal Information Protection Law.By interpreting paragraph 3 of Article 1034 of Civil Code through purpose expansion,thereby choosing the rule that protects sensitive private information more fully and strongly when the rules of privacy protection and the rules of personal information protection are inconsistent,in order to achieve the legislator’s goal of fully protecting the basic dignity and freedom of individuals in the private sphere.