“基于风险”的个人信息保护?

Risk-based Personal Information Protection

传统上,个人信息保护倚重个体行使控制性权利。近年来,在针对这一保护方法的批评中,一种基于风险的保护方法被提出,并在立法层面得到了一定程度的体现。这种基于风险的保护方法的潜力在于,在宏观层面,它有利于强调国家有义务为个体的自我发展创造结构性的环境,并适度关注一些集体层面的法益和损害;在微观层面,它有利于指导抽象的法律原则根据具体场景中的风险水平而合比例地适用。然而,与传统健康、环境等传统风险规制领域不同,个人信息保护领域引入基于风险的方法也面临风险预防缺乏焦点、风险评价无法客观量化、风险的功利考量与权利的道德边界需要协调等挑战。

legal principles proportionally according to the risk level in specific scenarios.Unlike the traditional risk regulation fields such as health and environment,the introduction of“risk-based”approach in the field of personal information protection also faces challenges such as the lack of focus on risk precaution,the inability to objectively quantify risk assessment,and the need to coordinate the utilitarian consideration of risk and the moral boundary of rights.