论个人信息处理目的要求的客观范式

The Objective Paradigm of the Purpose Requirement of Processing Personal Information

个人信息保护法规定处理行为应“具有明确、合理的目的”,该目的要求缺乏足够明确的释义。过去研究中形成了告知同意进路、目的特定原则进路与目的正当性原则进路。告知同意进路因其自身缺陷已广受批评,目的特定原则与目的正当性原则背后体现了截然不同的分析范式。目的特定进路下目的的确定和明确仍然通过处理者自我监管来实现,这种主观范式本质上寄希望于个人充分获得信息以真实同意,忽视了个人面临信息收集时难以冷静理性的事实前提。目的正当性进路要求查明真实处理目的,这种对目的的主观理解既不具备可操作性也不符合比例原则原理。客观范式区分“目的要求”作为处理者自我监管要求与作为客观审查标准的两种面向,要求审查者根据处理行为中的处理范围、个人信息类型等客观要素来判断处理目的,并明确处理目的的实质规范内容即追求的法益类型和实现程度。

The Personal Information Protection Law requires that each processing shall have“a clear and reasonable purpose”,but this purpose requirement lacks a sufficiently clear interpretation.In the past,the Informed-Consent approach,the Purpose Specific Principle approach and the Legitimate Purpose Principle approach have been developed.The Informed-Consent approach has been widely criticized for its own shortcomings.The Purpose Specific Principle approach and the Legitimate Purpose Principle approach embody very different analytical paradigms.In the Purpose Specific Principle approach,the determination and specification of purpose are still achieved through the self-regulation by the processor.This the“Subjective Paradigm”essentially expects the genuine consent by individuals after getting sufficient information,this approach ignores the factual premise that individuals are difficult to stay calm and rational when faced with the processing of personal information.The Legitimate Purpose Principle approach which requires the identification of true purpose,is a subjective understanding of purpose,which is neither operational nor consistent with the principle of proportionality.The“Objective Paradigm”distinguishes between the purpose requirement as a requirement for self-regulation by the processor and its orientation as an objective standard of judicial review,which requires the reviewer to evaluate the purpose of the processing on the basis of its objective elements such as the scope of processing behavior and types of personal information,as well as to specify the substantive normative content of the purpose,namely the type of legal interests and the extent of realization.