个人信息同意任意撤回:目的、体系与规则

Free Withdrawal of Personal Information Consent:Purposes,System and Rules

个人信息同意任意撤回构成对个人信息同意这一有效意思表示的撤销,但与《民法典》第147~152条规定的可撤销法律行为有若干不同,其规范目的在于保障个人信息自决。就权利行使而言,个人信息同意任意撤回权的权利主体是信息处理所涉及的个人。撤回同意时,个人应具有辨认和控制能力。个人信息同意撤回不受期间限制,既可采取书面形式,也可采取口头形式。处理者应提供便捷的撤回方式并保证撤回是免费的。同意被撤回后,处理者应停止处理并删除个人信息,但不影响撤回前已进行的处理的效力。在未通过“捆绑禁止”测试时,处理者不得以同意被撤回为由拒绝提供产品或服务。随着数字经济的发展,出现了若干限制个人信息同意撤回权的尝试。

The free withdrawal of personal information consent constitutes a revocation of the valid consent,but differs from the revocation of legal act in Articles 147-152 of the Civil Code of PRC;its normative aim is to guarantee the self-determination of personal information.As far as the exercise of rights is concerned,the subject of the right to withdraw personal information consent is the individual involved in the information processing,and he/she can authorize others to exercise it on behalf of him/her.When withdrawing consent,the individual should have the corresponding identification and control ability.The withdrawal of personal information consent is not subject to a time limit and may be in either written or oral form.The processor should provide a convenient means of withdrawal and guarantee that the withdrawal is free of charge.After the consent is withdrawn,the personal information processor shall stop processing and delete the personal information,without affecting the validity of the personal information processing activities based on the consent before withdrawal.Personal information processors may not refuse to provide a product or service on the ground of withdrawal if they fail the"bundle prohibition"test.With the development of digital economy,there have been a num-ber of attempts to restrict the right to withdraw personal information.