个人信息处理中“知情同意”的审视与重构——数据确权的前思考

Review and Reconstruction of “Informed Consent” inPersonal Information Processing——Pre-thinking of Data Confirmation

合法处理个人信息是个人信息保护的通识,其规范化进路是将“知情同意”作为认定处理行为合法与否的基础依据。“知情同意”在属于原则或规则的探讨上存在分歧,在法律性质的认定上存有争议,在实践效果层面为人诟病。通过学理审视,可发现“知情同意”是一种信息处理机制,体现了信息主体的意思自治,构成非典型性法律行为。“知情同意”的法律属性蕴含信息主体财产确权理念。信息主体与信息处理者通过“知情同意”达成一项信息处理合同,该合同构造了个人信息处理的内部合法性边界。既有法律规定和社会共同认可的价值观念等构造的外部边界对内部边界起必要的补强和限制作用。为使“知情同意”作为个人信息处理合法性基础具有更清晰的逻辑起点和更具可操作性的机制抓手,还需要剖析个人信息概念的二元架构,区分个人信息与个人数据,深化个人信息保护检察公益诉讼。

Legitimate processing of personal information is the general knowledge of personal information protection,and its normative approach is to take “informed consent” as the basic basis for determining the legality of processing behavior.There are differences in the discussion whether “informed consent” is an principle or a rule,controversies in the determination of its legal nature,and criticism in terms of practical effectiveness.Through theoretical examination,it can be found that “informed consent” is a kind of information processing mechanism which reflects the autonomy of the information subject and constitutes an atypical legal act.The legal attribute of “informed consent” contains the idea of confirming the property right of the information subject.The information subject and the information processor reach an information processing contract through “informed consent”,which constructs the internal legal boundary of personal information processing.The external boundary constructed by existing legal provisions and socially recognized values play a necessary role in reinforcing and limiting the internal boundary.In order to provide a clearer logical starting point and more operational mechanism for “informed consent” as the legal basis for personal information processing,it is also necessary to analyze the binary structure of the concept of personal information,distinguish personal information from personal data,and deepen the procuratorial public interest litigation of personal information protection.