个人信息“守门人”义务的行为构造及其规范路径

Behavior structure and normative path of personal information“gatekeeper”obligation

为有效应对“守门人”所带来的新型风险,有必要重新审视既有规范。《中华人民共和国个人信息保护法》第58条虽然规定了“守门人”条款,但对义务的具体内容却未作展开。在解释论上,应明确“守门人”行为方式的特殊性,厘清“守门人”行为方式的内嵌性与外置性。区分“守门人”行为构造的两个层次,构建数据处理义务、经营管理义务的合规体系。通过事前规制与事后惩戒相结合的方式,形成动态的规范路径。

It is necessary to re-examine existing norms in order to effectively address the new risks brought about by“gatekeepers”.Although Article 58 of The Personal Information Protection Law stipulates the“gatekeeper”clause,it does not elaborate on the specific content of obligations.In interpretive theory,it is necessary to clarify the particularity of the behavior of“gatekeepers”and clarify the embeddedness and externalization of their behavior.Distinguish the two-level behavior structure of“gatekeepers”and construct a compliance system for data processing obligations and business management obligations.By combining the pre-regulation with the post-punishment,a dynamic regulatory path is formed.