个人信息在国家机关之间传输的类型化治理

Type-Based Governance of Transmission of Personal Information Between State Organs

个人信息传输是我国《个人信息保护法》第4条第2款规定的一种个人信息处理行为,国家机关之间通过数据共享技术传输个人信息,在我国数字政府建设中渐成常态。基于传输主体的组织形态、传输发起的缘由等不同因素,个人信息在国家机关之间的传输行为呈现一体化和点状式两种实践形态。前者是基于公共数据共享平台而展开的规模化传输,后者则是国家机关在履行法定职责或法定义务过程中,因职权互动或依职权主动而展开的个案式传输。从本质上而言,以上两类行为在法律属性上属于双元性事实行为。为了应对“一体化形态”的叠加风险与“点状式形态”的特殊风险,宜基于类型化视角对国家机关间个人信息传输行为进行适法性调适,以法律保留原则对传输行为区分不同的规范强度,根据程序正当原则对传输行为形成梯度性约束,并按照均衡性原则对传输行为进行差异化调控。

Personal information transmission is a personal information processing behavior stipulated in Article 4(2)of the Personal Information Protection Law of China.The transmission of personal information between state agencies through data sharing technology has gradually become a normal condition in the construction of digital government in China.Based on different factors such as the organizational form of the transmission subject and the reasons for the initiation of transmission,the transmission of personal information between state agencies presents two practical forms:integratied and point-to-point pattern.The former is a large-scale transmission based on public data sharing platforms,while the latter is a case based transmission carried out by state agencies in the process of fulfilling legal responsibilities or obligations due to power interaction or initiative.Fundamentally,such behavior belongs to dual factual behavior in terms of legal attributes.In order to cope with the superimposed risks of the“integrated pattern”and the special risks of the“point-to-point pattern”,it is advisable to adjust the legal nature of personal information transmission behavior between state agencies based on a typological perspective.The transmission behavior should be differentiated according to the principle of legal retention to different normative strengths and be subject to gradient constraints based on the principle of due process and differentiated should be carried out according to the principle of balance.