知情同意规则在网络个人信息处理中的适用困境及进路

Study on the Application Dilemma and Solutions of Informed Consent Rules in the Processing of Online Personal Information

当前,大数据成为信息时代的核心战略资源,对国家治理能力、经济运行机制、社会生活方式均产生深刻影响。与此同时,其潜藏的数据安全风险也日渐突出。近年来,有关数据泄露、数据窃听、数据滥用等安全事件时有发生。互联网企业作为用户个人信息的处理者,可能存在超范围处理用户个人信息,在未经用户同意的情况下擅自向不具备保障用户个人信息安全能力的第三方进行共享的情况。其过程存在的具体问题包括:侵害用户知情权益,忽视用户信息层次性,用户同意撤回权难有保障等。在个人信息处理过程中,知情同意规则面临适用困境。基于此,文章提出了采用择入机制为主的知情同意缺省规则;严格适用单独同意规则,对用户个人信息进行类型化保护;设置同意撤回机制,保障用户行使同意撤回权等相应纾解进路。

Currently,big data has become a core strategic resource in the information era,exerting profound impact on national governance capabilities,economic operation mechanisms,and social lifestyles.At the same time,the hidden risks are also becoming increasingly prominent.In recent years,incidents such as data breaches,data eavesdropping,and data abuse have occurred frequently.As processors,Internet enterprises may exercise excessive processing of information,as well as unauthorized sharing of information to a third party that does not have the ability to safeguard users'personal information.Risks in the process include:infringement of users'right to know,neglect of the hierarchical nature of user information,and difficulty in safeguarding users'right to withdraw consent,which lead to dilemmas in the application of the informed consent rule.based on this,the thesis proposes solutions to apply a default rule that adopts an opt-in mechanism;Strictly apply the separate consent rule and provide typological protection;Set a consent revocation mechanism to ensure that users exercise their right to withdraw consent.