知情同意原则在网络隐私政策中的适用路径

The Application Path of Informed Consent Principle in Network Privacy Policy

大数据时代个人信息的非法收集利用给人们的信息隐私带来了巨大的威胁。知情同意原则是信息收集者采集信息主体个人信息的合法性基础,而网络隐私政策是互联网企业实现个人信息保护机制“告知—同意”效力的重要手段。通过对网络隐私政策实际披露情况的研究,发现知情同意原则在网络隐私政策中存在知情原则缺位、同意原则虚化及用户事后权利难以救济等问题。对此应建立以分层同意、风险评估为导向的动态知情同意模式,优化个人信息保护的规范体系,采取行政监管、公司治理与行业自治结合的治理结构。

In the era of big data,the illegal collection and utilization of personal information has brought a great threat to people’s information privacy.The principle of informed consent is the legal basis for information collectors to collect information subject’s personal information,and the network privacy policy is an important means for Internet enterprises to realize the effect of the personal information protection mechanism—“informing-consent”.Through the research of the actual disclosure of the Internet privacy policy,it is found that there are some problems in the principle of informed consent in the Internet privacy policy,such as the absence of the principle of informed consent,the vagueness of the principle of consent and the difficulty in the remedy of users’rights after the event.In this regard,a dynamic informed consent model guided by hierarchical consent and risk assessment should be established,and a standardized system for protecting personal information should be optimized.A governance structure that combines administrative supervision,corporate governance,and industry autonomy should be adopted.