互联网平台保护青少年个人信息的主体责任完善

Suggestions for Improving the Main Responsibility of Internet Platforms to Protect the Personal Information of Teenagers

文章基于互联网平台披露的隐私政策及相关个人信息处理规则,探究在缺乏相关法律对已满14周岁未成年人即青少年的个人信息进行特别保护的情况下,国内互联网平台在处理个人信息的过程中是否尽到相应的主体责任。研究发现,互联网平台在处理青少年个人信息的多个环节存在问题,包括头部环节的同意规则适用对象与身份识别制度存在不足,中部环节的算法处理未尽告知义务与推送机制不完善等,以及尾部环节的匿名化处理替代删除不到位,建议互联网平台从同意规则、算法处理以及删除与匿名化处理规则三个层面完善主体责任。

Based on the privacy policies and personal information collection lists disclosed by internet plat-forms, this article explores whether domestic internet platforms have fulfilled their main responsibilities in handling personal information in the absence of relevant laws that provide special protection for the personal information of minors who have reached the age of 14, i.e. adolescents. The study found that Internet platforms have problems in several aspects of handling personal information of juveniles, including inadequate consent rules and identification systems in the first part of the process, insufficient notification obligations and inadequate push mechanisms in the middle part of the process, and inability to replace deletion with anonymisation in the last part of the process. It is recommended that internet platforms improve their main responsibilities at three levels: rules on consent, algorithmic processing and rules on deletion and anonymisation.