患者个人信息的国家保护义务:主观权利与客观价值秩序双重属性的统一

State Duty to Protect Patients'Personal Information:the Unification of Subjective Rights and Objective Value Order

患者个人信息处理所涉法律关系,为“公民-国家-第三人”的三方结构;选择基于宪法基本权利位阶的个人信息受保护权所对应的患者个人信息之国家保护义务模式,更能保护患者权益。鉴于目前我国在患者个人信息保护方面的立法滞后、规范不足、公权力权限界定不清等,建议在明确患者个人信息受保护之基本权利的主观权利和客观价值秩序双重属性的基础上,一方面明晰公权力机关在信息处理过程中所应遵守的行为原则,严格限定其权限范围,积极提供行政救济保护,落实国家的消极保护义务,防御国家对患者个人信息的侵害;另一方面基于客观价值秩序属性,以完善追责制度、设立专门的监管组织、优化救济程序、预防第三方侵害等协同保障患者个人信息安全。

The legal relationship involved in the processing of patients'personal information is a tripartite structure of"citizen-state-third party".It is better to protect patients'rights and interests by choosing the mode of national protection obligation correspond⁃ing to the right to protection of personal information based on the basic rights of the constitution.In view of the lagging legislation,inad⁃equate norms,and unclear definition of public power and authority in the protection of patients'personal information in China,it is sug⁃gested that on the basis of clarifying the dual attributes of the subjective right and the objective value order of the basic right of patients'personal information protection,on the one hand,the behavioral principles that public power organs should abide by in the process of in⁃formation processing should be clarified,the scope of their authority should be strictly limited,administrative relief protection should be provided actively,the state's passive protection obligation should be implemented,and the state's infringement on patients'personal in⁃formation should be defended against;on the other hand,based on the objective value order attribute,coordinated protection of patients'personal information security should be carried out by improving the accountability system,setting up a special supervision organiza⁃tion,optimizing relief procedures,and preventing third-party infringement.