人工智能时代的《民法典》医疗数据规则体系研究

Regulation System of Medical Data in the Civil Code in the Age of Artificial Intelligence

《民法典》基于第127条数据治理一般条款初步构建了医疗数据规则体系的雏形,主要以医疗数据中隐私和个人信息的权属规则、授权规则和保护规则的形式体现。人工智能时代的《民法典》医疗数据治理取向应由“保护优先”转变为“保护与应用兼顾”,根据公开性、敏感性和应用场景进行类型化展开。医疗数据权益属于人格权列举种类之外与人身自由和人格尊严相关的其他人格利益,应归属于患者。依托医疗数据类型化进行分层动态授权,将授权规则纳入诊疗行为、人体临床试验和医学科研等场景中的知情同意范围。将保护对象扩展到全部医疗数据,区别规定敏感医疗数据、非敏感医疗数据和公开医疗数据的保护规则,区分侵害医疗数据造成精神损害和财产损害的法律适用。

The Civil Code,based on the general provisions of data governance in Article 127,has preliminarily established the framework of medical data regulations,primarily reflected in the form of ownership rules,authorization rules,and protection rules regarding privacy and personal information in medical data.In the era of artificial intelligence,the governance approach of medical data in the Civil Code should shift from"protection first"to a balanced approach of"protection and application",which should be practiced according to categorizations of openness,sensitivity,and application scenarios of the data.The rights and interests of medical data belong to other personality interests related to personal freedom and dignity that are not enumerated in the category of personality rights and should belong to patients.It is suggested that hierarchical dynamic authorization be implemented based on categorized medical data and to include authorization rules in the informed consent scope of scenarios such as clinical diagnosis and treatment,human clinical trials,and medical research.The scope of protection should be extended to all medical data,with distinct protection rules for sensitive,general,and publicly available medical data,and the legal application should differentiate between mental and property damages caused by the infringement of medical data.