论个人信息保护的声誉激励

Reputation Incentives for Personal Information Protection

《个人信息保护法》在实施过程中面临政府外部规制成本高昂、企业自我规制效果不彰两大困境。经济法视域下的声誉激励通过奖励与制裁的方式发挥作用,兼具低监管成本与高规制收益的优势,能够有效化解此困境。完善个人信息保护的声誉激励时,一方面声誉制裁工具的运用须遵循谦抑干预和精准规制的理念,根据个人信息违法处理行为的危害性、危害持续时间、损害后果进行分级规制,并考虑声誉修复的可能性;另一方面,声誉奖励的引入需明确授奖的实体标准和程序要件,具体可通过“白名单”制度得以呈现。

The Personal Information Protection Law faces two major dilemmas in its implementation.On the one hand,the cost of external government regulation is high.On the other hand,self-regulation by enterprises is ineffective.Reputational incentives from the perspective of economic law play a role through incentives and sanctions,and have the advantage of both low regulatory costs and high regulatory benefits,which can effectively resolve this dilemma.Improving reputation incentives for the handling of personal information can be carried out in the following aspects.On the one hand,the use of reputational sanction tools should follow the concept of modest intervention and precise regulation,with graded regulation according to the harmfulness,duration of harm and damage consequences of the illegal handling of personal information,while taking into account the possibility of reputation repair.On the other hand,the introduction of reputational awards should clarify the substantive criteria and procedural elements of the award,which can be presented through"white list"system.