个人数据所有权的赋权逻辑与制度展开

The Entitlement Logic and Institutional Design of Personal Data Ownership

在个人数据权属分配问题上,多数观点认为赋权于作为数据来源者的个人既无必要亦无可能,主张应将个人数据所有权配置给处理数据的企业,以此激励和保障数据利用效益最大化。然此种观点既不符合逻辑也不符合事实,作为来源者的个人和作为处理者的企业对数据的形成都有贡献,应当根据各自贡献程度的不同分别赋予所有权和用益权。赋予个人数据所有权并非是为企业增加负担,相反,企业在尊重个人数据所有权的前提下,通过“获取授权+支付对价”模式取得的数据用益权具有更强的独立权利机能,不但可以对抗个人信息权的部分权能,而且可以通过对许可方式作特别约定取得排他使用权。一旦企业形成了稳定的权利预期,才会增加对个人数据的开发投入、谋求长期收益,放弃短期机会主义行为,最终实现数尽其用。个人数据所有权的实现可以通过“个人数据资产账户+集体管理组织”这一模式落地,在制度构建时需要对个人数据所有权施加必要限制,以确保数据资源得以高效利用。

On the issue of personal data ownership distribution,most people argue that it is neither necessary nor possible to entitle individuals as data originator,and believe that personal data ownership should be allocated to enterprise which process data to encourage and ensure the greatest benefit of data utilization.However,this view is neither factual nor logical.The individual as the originator and the enterprise as the processor both contribute to the process of data generation,and ownership and usufruct should be granted respectively according to the source and degree of their respective contributions.To grant individual ownership of personal data doesn't mean increasing the burden on the enterprise.On the contrary,on the premise of respecting the ownership of personal data,the data usufruct obtained by the enterprise through the"authorization+consideration"model has a stronger independent right function,which can not only fight against the part of personal information rights power,but also the exclusive right to use can be obtained through a special agreement on an exclusive license.Once an enterprise has formed a stable expectation of rights,it will increase investment in the development of personal data,seek long-term benefits,abandon short-term opportunistic behavior,and finally realize the full utilization of data.The realization of personal data ownership can be implemented through the model of"personal data asset account+collective management organization".On the basis of entitlement,it is necessary to impose reasonable restrictions on personal data ownership to ensure that data resources can be exerted efficiently.