国有档案开放中个人信息处理活动的法理逻辑及规范架构

Legal Logic and Normative Framework of Personal Information Processing Activities in the Opening of State-owned Archives

如何消解档案开放利用可能产生的个人信息权益损害风险,平衡个人信息保护与档案开放利用之间的关系,是亟待解决的档案治理难题。国有档案开放场景不同于一般的私人领域数据处理场景,“告知同意”原则在该场景中会受到适用限制。国有档案开放中个人信息处理活动具有行为法定性、目的公共性和客体公物性等公权力特征,“法定职责所必需”是其运行的规范基础。实现国有档案开放场景下个人信息权益保护与档案数据流通利用的平衡,需要通过“清单细化+程序引导”明晰“法定职责”的具体化路径,从确保有效、权益影响最小和风险收益均衡等维度构建完善国有档案开放中个人信息处理活动“所必需”遵循的规范架构。

It is an urgent problem tobesolvedof archives management that how to eliminate the risk of personal information rights and interests being damaged in the open utilization of archives and balance the relationship between personal information protection and open utilization of archives.The state-owned archives opening scenario is different from the general private domain data processing scenario,in which the informed consent rules will be subject to applicable restrictions.Personal information processing activities in the opening of state-owned archives have the characteristics of public power,such as legal behavior,public purpose,and public property of object,etc.and"required by statutory duties"is the normative basis for its operation.To achieve a balance between the protection of personal information interests and the circulation and use of archival datain the scenario of opening state-owned archives,it is necessary to build and improve the normative framework that is"necessary"for personal information processing activities in the opening of state-owned archives from the dimensions of ensuring effectiveness,minimizing the impact of rights and interests,and balancing risks and benefits through"list refinement+program guidance"and clarifying the specific path of"statutory duties".