我国实践中个人信息可携权的优化进路——基于66款App隐私政策实证分析

The Way to Optimize Personal Data Portability in Chinese Practice——Based on Empirical Analysis of the Privacy Policies of 66 Mobile Apps

虽然现有法律规范和司法实践能够为个人信息可携权提供基础性指导,但通过对66款App隐私政策进行实证研究,从是否规定个人信息可携权、是否能够自行导出副本、是否有文本示例、是否需要身份验证、副本文档是否加密、所涉个人信息范围是否一致等方面进行考察可知,可携权实施存在障碍。这种实践差距一方面是由于对个人信息可携权利的误解,另一方面是由可携权的负外部性、实践成本与技术局限所导致。在对可携权重新思考的基础上,通过法律推动可携权的实施,以技术为导向的操作改进,响应流程机制的细化,以及增强系统互操作性等多层面的优化,在一定程度上可以消解个人信息可携权的实践难题。

Although the existing legal norms and judicial practices can provide basic guid-ance for the right to personal data portability,it can be concluded that there are obstacles to the realization of this right through empirical research of the privacy policies of 66 mobile apps,such as whether they have stipulations on the right to personal data portability,whether they are able to derive copies of personal information automatically,whether there are textual examples,whether ID verification is required,whether the copied documents are encrypted,and whether the scope of personal information involved is consistent.This gap in practice,on the one hand,reflects the misunderstanding of the right to personal data portability,and on the other hand,is a result of the negative externalities,practical costs and technical limitations of the right to per-sonal data portability.Based on rethinking the right to data portability,we can somehow solve practical problems concerning the right to personal data portability through multiple measures such as promoting the fulfillment of this right by legislation,optimizing technology-oriented operations,refining response process mechanisms,and enhancing system interoperability.