已公开个人信息处理规则的构造及适用——以合法处理事由为中心

Construction and Application of Publicly Issued Personal Information Processing Rules-Centered around Legitimate Processing Reasons

立法规定在合理范围内处理已公开个人信息豁免同意,“已公开”作为豁免同意规则的合法处理事由,但是个人(信息主体)明确拒绝的除外,以及“对个人权益有重大影响的”还需取得个人同意,以此为基点形成了耦合式、层次化但遵循了平衡逻辑的规则体系。一方面,规则体系表达了调和个人信息自决和适当必要保护、个人利益与公共利益、同一保护和差异保护、保护成本与流通收益的期许;另一方面,由于规范构成要件因素具有不确定性,规则体系内部以及与外部关系尚处于“混沌”状态。要解决此问题,须以“合法处理事由”为切入点,在明确规则体系内部关系及各要件意蕴的基础上厘清“已公开”“在合理范围内处理”“个人明确拒绝”“对个人权益有重大影响”与相关规范构成要件因素之间的关系,进而调适处理规则体系,使之协调统一。

The legislation directly stipulates the exemption of consent to the processing of publicly available personal information within a reasonable range.“Publicity”is the legitimate reason for the exemption of consent rules,except for the explicit refusal of the individual,and“having a significant impact on personal rights and interests”also requires personal consent.Based on this,a coupled and hierarchical rule system has been formed,but it follows a balanced logic.On the one hand,the rule system expresses the expectation of reconciling personal information self-determination and appropriate necessary protection,personal interests and public interests,equal protection and differential protection,protection costs and circulation benefits;on the other hand,due to the uncertainty of the constituent elements of norms,the internal and external relationships of the rule system are still in a“chaotic”state.To solve this problem,it is necessary to take“legitimate reasons for handling”as the starting point,clarify the relationship between“already disclosed”,“handled within a reasonable range”,“explicitly rejected by individuals”,“has a significant impact on personal rights”and the constituent elements of relevant norms on the basis of clarifying the internal relationships and meanings of each element in the rule system,and then adjust the handling rule system to make it coordinated and unified.