数据处理目的改变之法律挑战与对策

Legal Challenges and Countermeasures of Changes in Purpose of Data Processing

目的限制原则要求信息处理者对数据进一步处理不得与初始目的不兼容,大数据和人工智能的发展对该原则发起了挑战。大数据分析使用不同的算法分析数据,人工智能通过对所持有的数据进行训练,要求重新使用数据创造新的价值。改变数据处理目的,须在信息主体的基本权利保护、风险控制与促进创新之间构建一个新的平衡。为了给数据的进一步处理提供一定的灵活性,通过场景一致性构建兼容使用理论;为科学研究、统计目的使用数据推定具有兼容性,从而释放大数据分析的价值,并提高法律的可预测性。更进一步,通过代码塑造数据处理目的改变再次利用数据的行为规范。数据的设计和默认保护理念认为代码架构可以通过数据处理场景,将目的限制原则内置到信息系统当中,通过组织和技术保障措施确保数据重新使用具有兼容性与合法性,并保障数据安全。

The principle of purpose limitation requires information processors not to further process data that is incompatible with the original purpose.The development of big data and artificial intelligence has challenged this principle.Big data analysis uses different algorithms to analyze data,and artificial intelligence requires the reuse of data to create new value by training the data it holds.To change the purpose of data processing,a new balance must be established between the protection of the basic rights of information subjects,risk control and innovation promotion.In order to provide a certain degree of flexibility for further processing of data,a theory of compatible use is constructed through scene consistency;the use of data for scientific research and statistical purposes is presumed to be compatible,thereby releasing the value of big data analysis and improving the predictability of laws.Going one step further,shape the purpose of data processing through code to change the behavioral norms for reusing data.The concept of data protection by design and by default believe that the code structure can use data processing scenarios to build the principle of purpose limitation into the information system,and ensure the compatibility and legality of data re-use through organizational and technical safeguards,and ensure data security.