论正当权益作为个人信息处理的法律基础

On Legitimate Rights and Interests as the Legal Basis of Personal Information Processing

我国《个人信息保护法》第13条有关个人信息处理的法律基础的规定,并没有为实现处理者或第三人的正当权益而允许处理个人信息的情形。有关个人信息保护的司法实践却不断遭遇处理者为了自己或他人的正当权益而处理个人信息的纠纷。立法的无视或有意的空白,并不能消除或根除为实现处理者或第三人的正当权益而处理个人信息的情形。司法实践以曲折迂回的方式,特别是用免责事由的形式,在很大程度上实现了将“正当权益”的情形作为事实上的个人信息处理的法律基础。在未来,有必要在司法裁判上或以司法解释的方式正式承认处理者或第三人的正当权益可以作为处理个人信息的法律基础。

The provisions of Article 13 of the Personal Information Protection Law of China regarding the legal basis of personal information processing do not allow the processing of personal information to achieve the legitimate interest of processors or third parties.In judicial practice related to personal information protection,disputes constantly occur over the processing of personal information by processors for the legitimate interest of themselves or others.It is found that ignorance or intentional gaps in legislation cannot eliminate or eradicate situations where personal information is processed to achieve the legitimate interest of processors or third parties.Judicial practice has largely achieved the effect of using the“legitimate interest”as the legal basis for factual processing of personal information in a tortuous and circuitous manner,especially in the form of exemption grounds.In the future,it is necessary to formally recognize in judicial judgement or through judicial interpretation that the legitimate interest of processors or third parties can serve as the legal basis for processing personal information.