信息处理者风险创设行为的规制路径研究

Research on regulatory path of information processors risk-creating behavior

信息处理者在信息处理过程中可能创造出交往控制风险,当此种风险超越必要限度对信息主体造成不当干涉时,法律存在介入的必要。对于风险是否超越了必要限度的判断,应当以信息处理者是否履行了法定的作为义务或不作为义务为标准,信息处理者在处理过程中是否带有意欲影响他人决策的不当目的,并不构成风险异常性的判断标准。创设异常风险的行为具有违法性,构成对个人信息的侵权行为。但该行为所创设的异常风险难以纳入当前损害的概念之中,将风险作为损害有违损害的确定性与客观性,也将增加因果关系认定的难度与成本。因此,在立法论上,我国可尝试引入惩罚性赔偿制度,将交往控制风险作为判断惩罚性赔偿诸要件的要素或标准之一;在解释论上,法院可通过个别类推个人信息损害赔偿规则对信息主体的救济。

Information processors may create interaction control risks in the course of information processing,and when such risks exceed the necessary limits to cause undue interference with the subject of the information,there is a need for the law to intervene.The judgment of whether the risk exceeds the necessary limit shall be based on whether the information processor has fulfilled the legal obligation of action or inaction,and whether the information processor has the improper purpose of influencing the decision-making of others does not constitute the criterion for judging the abnormality of the risk.The act of creating an abnormal risk is illegal and constitutes an infringement of personal information.However,the abnormal risk is difficult to be included in the concept of damage,and treating the risk as damage is contrary to the certainty and objectivity of damage,and will also increase the difficulty and cost of determining the causal relationship.Therefore,in terms of legislation,we can try to introduce punitive damages system,taking the risk of relationship control as one of the criteria for judging the elements of punitive damages.In terms of interpretation,the court may apply by analogy the personal information damages rules to compensate for lost.