论个人信息可携带权的客体界定

The Object Definition of the Right to Portability of Personal Information

我国《个人信息保护法》和《信息安全技术个人信息安全规范》对个人信息可携带权客体的规定存在范围过窄或范围不明确的问题,背后根源在于个人信息可携带权客体的界定标准尚未达成共识。“贡献度说”明确了不同数据价值区分的根本原因,符合分配正义的要求,也有利于实现个人与个人信息处理者之间利益的平衡,以其作为个人信息可携带权客体的界定标准较为合理。基于贡献度标准,直接数据和观测数据的产生主要源于个人的贡献,因而属于个人信息可携带权的客体;衍生数据的产生主要源于个人信息处理者的劳动,个人对其贡献较小,因而不宜作为个人信息可携带权的客体;匿名数据由于不属于个人信息,因而也不能成为个人信息可携带权的客体。

China s Personal Information Protection Law and the Information Security Technology Personal Information Security Standards have a narrow or unclear scope for the objects of the right to portability of personal information,and the root cause of this problem is that consensus has not yet been reached concerning the criteria for defining the object of the right to portability of personal information.The“Degree of Contribution”is in line with the requirement of distributive justice as it clarifies the fundamental reason for differentiating the value of different data,and is also conducive to realizing a balance between the interests of individuals and the processors of personal information,so it is more reasonable to use it as the criterion for defining the object of the right to portability of personal information.Based on the criterion of contribution,the generation of direct data and observed data mainly comes from the contribution of individuals,and thus they belong to the object of the right to portability of personal information;the generation of derivative data mainly comes from the labor of personal information processors,and the contribution of individuals to the data is small,so they are not appropriate to be the object of the right to portability of personal information.Anonymized data are not personal information and thus cannot be the object of the right to portability of personal information.