生物识别信息保护制度的检视、借鉴与完善--以“人脸识别案”比较研究为视角

Review,Reference and Improvement of Biometric Information Protection System--From the Perspective of Comparative Study on the Case of“Face Identification”

近年来,个人信息泄露事件频繁见诸报端,已成为严重侵犯公民隐私权、妨害社会管理秩序的重要问题。通过对域内外“人脸识别”典型侵权案件比较分析,梳理生物识别信息的特殊性及侵权行为的司法保护难点,提炼、总结有借鉴意义的法律保护原则及具体应对举措,结合相关法律规定,兼采域内外立法例之长,提出构建以民事侵权保护为中心的私法保护路径,包括明确界定生物识别信息、确认侵权行为的“程序性违法”原则、建立惩罚性赔偿金制度、完善“代表人诉讼”制度;同时,构建以行政与刑法保护兼施为辅的公法保护路径,具体举措包括确定单一监管责任部门、强化企业责任和内部评估、完善公益诉讼介入渠道。

In recent years,personal information leakage has been reported frequently,which has become an important issue that seriously infringes citizens’privacy and hinders social management order.Based on the comparative analysis of typical infringement cases of“face identification”in China and abroad,this paper sorts out the particularity of biometric information and the difficulties of judicial protection of infringement;refines and summarizes the legal protection principles and specific countermeasures with reference significance;combines the relevant provisions of the Civil Code,the Provisions of the Supreme People’s Court on Several Issues Concerning the Application of Law in the Trial of Civil Cases Related to the Use of Face Identification Technology to Process Personal Information,and the Personal Information Protection Law;and draws on the strengths of domestic and foreign legislation to propose a private law protection path centered on civil infringement protection,including clearly defining biometric information,confirming the principle of“procedural violation”of infringement,establishing a punitive damages system and improving the system of“representative litigation”.At the same time,a public law protection path supplemented by both administrative and criminal law protection will be constructed,including determining a single regulatory responsible department,strengthening corporate responsibility and internal assessment,and improving the intervention channels for public interest litigation.