个人信息监管沙箱的法理基础与制度构建

Theoretical Justification and Institutional Construction of the Personal Information Regulatory Sandbox

以个人信息为主要内容的大数据是数字经济的核心生产要素。目前,个人信息行政监管的主要手段是专项治理。个人信息专项执法所依赖的自上而下控制型监管路径,导致监管与创新之间冲突,甚至出现监管抑制技术创新等诸多问题。个人信息专项治理的重点是超范围收集、强制索权和一揽子授权等违法处理行为,虽然可以防控个人信息大规模处理引发的泄露和被滥用风险,但是对数字经济发展形成了制度性约束,势必会造成数据资源的结构性浪费和紧缺。通过专项整治防控个人信息处理风险,凸显了运动式监管范式的困境。个人信息行政监管,亟待形成一种适应数字经济发展的系统性范式。基于监管合作主义、穿透式监管策略和监管试验主义的个人信息监管沙箱,是诱发个人信息行政监管范式转换的关键变量,可以有效平衡数字经济发展和个人信息安全之间的冲突,应当作为未来个人信息的监管工具。

Big data,with personal information as its main content,is the core production el-ement of the digital economy.At present,the main means of administrative regulation of personal information is special governance.The top-down control regulatory path relied upon for special enforcement of personal information has caused many problems,such as tension between insuffi-cient regulatory and innovation and even inhibiting technological innovation.The focus of special governance of personal information is on illegal processing behaviors such as excess collection,compulsory claim and excessive authorization.Although it can prevent and control the risk of leakage and misuse caused by large-scale processing of personal information,it forms an institu-tional constraint on the development of the digital economy,which is bound to cause structural waste and shortage of data resources.The prevention and control of personal information process-ing risks through special governance has highlighted the dilemma of the campaign-style regula-tion paradigm.It is urgent to form a systematic paradigm for administrative regulation of personal information that adapts to the development of the digital economy.The personal information regu-latory sandbox based on the concepts of regulatory cooperation,penetrating regulation and regula-tory experimentation is a key variable inducing the transformation of the paradigm of administra-tive regulation of personal information.It can effectively balance the conflict between the develop-ment of the digital economy and the security of personal information,and should be used as a reg-ulatory tool for personal information in the future.