论个人信息法律体系下的基因信息保护

Gene Information Protection within the Personal Information Law System

《民法典》和《个人信息保护法》构成我国个人信息保护的基本法律体系。然而,高度敏感、特异性显著的基因信息之于人格尊严关系重大,亟待特殊制度保护,但抽象概括的现行法缺少针对性,无法全面因应个人基因信息权益保护及社会实践的制度需求,有必要开展专门立法,构建民法典、个人信息保护法、基因信息法三层制度体系。基因信息保护应以基因信息隐私自决与安全为先,兼顾流动利用;以自然人基因权益为本,衡平多重利益;实行法律与伦理共治,融合宽容及责任原则。据此,在基因信息类型化及可处理性分级的前提下,立足通用个人信息法律制度,明晰个人基因信息权益,厘清特定的目的、充分的必要性和严格保护措施等处理前置条件,重点围绕基因信息处理告知同意,开展差异化制度设计,构造非完全行为能力人同意、以书面为原则的同意方式、同意的无条件撤回、基于基因信息类型的同意豁免事由等特殊规则。

The Civil Code and the Personal Information Protection Law constitute the basic legal system for personal information protection in China.However,highly sensitive and specific genetic information is of great importance to human dignity and urgently needs special institutional protection.Yet the current laws,which are abstract and generalized,lack pertinence and cannot fully meet the institutional needs of the protection of personal genetic information rights and interests and social practice.What is well known is that specialized legislation on genetic information is quite common in the practice of global rule of law.The supply of special systems can effectively promote the development of the genetic technology industry and the realization of China's national strategy for biotechnology.Therefore,special legislation must be fashioned to build a three-tier institutional system of the Civil Code,the Personal Information Protection Law,and the Genetic Information Law.In special legislation,the self-determination and security of genetic information privacy are prioritized,and mobile utilization is considered;genetic rights and interests of natural person are the foundation,and multiple interests are balanced;law and ethics govern together,and tolerance and responsibility are integrated.Furthermore,special legislation should be rooted in the types of genetic information,namely independently identifiable information,aggregated identifiable information,and non-identifiable(anonymous)information.Then the process-ability should be graded among strictly limited,partially limited,and highly free types.In terms of the core rules for personal information protection,it is necessary to first clarify the specific purpose,sufficient necessity,and strict protective measures,and then carry out the design of differentiated systems for informed consent,such as the consent rule for natural person with no full capacity,the method of informed consent,the unconditional withdrawal of consent,and the grounds for exemption of consent based on the types of genetic information.