公开个人信息法律保护的中国方案

The Chinese Approach to Legal Protection of Non-Confidential Personal Information

公开个人信息法律保护可以有多种方案。美国将公开个人信息排除在其个人信息保护法之外,欧盟将公开与非公开信息一体保护,我国则采取中间道路,对公开个人信息进行弱化保护。我国方案整体具有合理性,但应进一步阐释其法理、设计其制度。在法理层面,公开个人信息在公开环节已经经过利益权衡,这降低了其法律保护特别是个体控制的正当性。然而公开个人信息的大规模处理仍然可能汇聚风险,同时信息处理者与个体往往形成缺乏信任的陌生人关系,强化某些风险。在制度层面,应将我国对公开个人信息的自由处理限定在收集环节,从理性个体与社会合理预期角度解释“在合理的范围内”“个人明确拒绝的除外”“对个人权益有重大影响”等规定,避免以个体主观标准进行判断。在个人信息利用环节,应整体弱化个人信息权利保护,维持信息处理者义务。

There are multiple options for legal protection of public personal information.The United States excludes public personal information from its personal information protection laws,the European Union integrates public and non-public information protection,and China adopts an intermediate approach to provide weekend protection for public personal information.The overall plan of our country is reasonable,and its legal principles should be further elaborated and its system designed.At the jurisprudential level,the disclosure of personal information has undergone a balance of interests in the disclosure process,which reduces the legitimacy of legal protection,especially individual control.However,the large-scale processing of publicly available personal information may still aggregate risks,and at the same time,there is often a lack of trust between information processors and individuals,reinforcing certain risks.At the institutional level,China's free processing of public personal information should be limited to the collection process,and provisions such as “within a reasonable range”,“excluding those explicitly rejected by individuals”,and “those that have a significant impact on personal rights” should be explained from the perspective of rational individuals and reasonable social expectations,avoiding subjective judgment based on individual criteria.In the process of utilizing personal information,the application of personal information rights should generally be weakened,and the application of information processor obligations should generally be maintained.