已公开个人信息合理处理的实践困境及因应之策

Challenges and Strategies for the Reasonable Processing of Publicly Disclosed Personal Information

近年来,我国陆续出台相关法律法规,逐步完善了个人信息处理规范,但直到《民法典》的出台,已公开个人信息才被作为个人信息的一种特别类目进行特殊保护。不同于一般个人信息处理中的“告知-同意”规则,已公开个人信息处理规则的特殊性体现在个人信息处理者可以在合理范围内对其进行处理,而无需个人信息所有者的事前同意。但目前已公开个人信息处理实践面临困境:以必要性原则为代表的处理原则界定模糊;“选择-退出”机制与“删除权”机制的实现存在障碍;自由裁量权行使不一的情况时有出现。因此,扫除在个人信息保护深入推进道路上埋下的隐患刻不容缓。文章结合我国现有判例,参考域外相关立法与理论,提出已公开个人信息合理处理的因应之策:在规范层面,对必要性原则进行强化以及将动态系统论引入处理合理性的判断;在机制层面,完善“选择-退出”机制与“删除权”机制。

In recent years,China has successively refined the rules for processing personal information through the enactment of various laws and regulations.A significant milestone was achieved with the introduction of the Civil Code,which uniquely categorized publicly disclosed personal information and accorded it special protection.This category differs from the general personal information processing norms,particularly the standard"notification-consent"rule.Specifically,it permits the processing of publicly disclosed personal information within a reasonable scope without requiring the prior consent of the information owner.However,the application of these rules for publicly disclosed personal information encounters several challenges.First,the principle of necessity,which is crucial in determining the legality of processing such information,lacks a clear and precise definition.Second,implementing the mechanisms of"opting out"and"the right to delete"has some practical difficulties.Additionally,the exercise of discretion is often inconsistent.In light of these challenges, it is imperative to address existing vulnerabilities to enhance the protection of personal information. The pro-posed measures draw upon China's jurisprudential framework and incorporate insights from international legislations and theories. At a normative level, it is essential to clarify and strengthen the principle of necessity. Introducing dynamic systems theory could help as-sess the reasonableness of personal information processing more effectively. Institutionally, enhancements to the "opting-out" mechan-ism and the fortification of "the right to delete" process are critical.