利益平衡视角下涉他数据可携权行使规则的体系展开

System of the Rules for the Exercise of the Right of Portability of Data Involving Others from the Perspective of Balance of Interests

我国《个人信息保护法》第45条第3款数据可携权的确立为数据流动提供了更多可能性。但若数据可携权的对象指向涉他数据,则可能威胁第三人的权利和自由。大数据时代下,数据要素牵涉多元利益。因此,对数据主体、数据控制者、数据接收者、第三人的四方利益衡平,必须贯穿于数据可携权权利行使的各阶段。在权利行使前端,应将重心落在可携权行使的数据范围限定上,并同时以第三人同意为必要;在权利行使后端,应着重区分接收者的处理目的,并以此对知情同意规则之适用作进一步的类型化阐释。

The establishment of the right to data portability in Article 45(3)of Chinese Personal Information Protection Law provides more possibilities for data flow.However,if the object of the data portability right directs to data involving others,it may threaten the rights and freedom of third parties.In the era of big data,data elements involve multiple interests.Therefore,balancing the interests of data subjects,data controllers,data recipients and third parties must be carried out at all stages of the exercise of data portability rights.At the front end of the exercise of the right,the focus should be on the scope of the data for the exercise of the right of portability,and the consent of the third party is necessary simultaneously;at the back end of the exercise of the right,the focus should be on distinguishing the processing purpose of the recipient,and the application of the informed consent rule should be further interpreted in a typological manner.