公共图书馆读者个人信息保护的原则与进路--参照《个人信息保护法》

Principles and Approaches to the Protection of Reader personal Information in Public Libraries:With Reference to the“Personal Information Protection Act”

保护读者个人信息是公共图书馆提升服务质量与治理效率的基础,也是图书馆治理法治化的内在要求。而今,读者个人信息仍存泄露、滥用风险。此与信息安全意识不足、信息安全技术落后、风险防控系统缺位、内外监督机制薄弱关联甚大。为此,公共图书馆应坚持事前预防为中心、事中控制为基础、事后救济为补充的保护范式,在遵守《个人信息保护法》信息处理五项原则的前提下,致力于增强信息安全意识、推动安全技术革新、健全风险防控系统、强化内外监督机制。

Readers’personal information security is the basis to improve service quality and governance efficiency for digital libraries,and is also the inherent requirement of the legalization of library governance.Nowadays,readers’personal information is still at risk of being leaked and abused.The reasons are related to the lack of information security awareness,the backwardness of information security technology,the lack of risk prevention and control mechanism,and the weakness of security supervision mechanism.In view of this,public libraries should adhere to the protection paradigm of prevention as the center,in-process control as the basis,and post relief as the supplement.On the premise of abiding by the five principles of information processing in the“Personal Information Protection Law”,public libraries should be committed to enhancing information security awareness,promoting security technology innovation,improving risk prevention and control systems,and strengthening internal and external supervision mechanisms.