已公开个人信息合理使用的解释方式与司法认定——以自动化决策应用场景为例
赵精武1
作者信息
摘要
《个人信息保护法》第 13 条将个人信息的公开作为知情同意规则适用的例外情形,但第 27 条等规定又对这种例外情形施加"合理的范围"等限制条件.而在实践中,如何解释"合理的范围""合理使用"存在诸多争议.控制利益保留论、合理期待论、效率平衡论等学术主张在不同程度上忽视了对已公开个人信息保护理论的探讨,存在已公开个人信息保护强度弱于未公开个人信息的逻辑误区.结合国内"法先生滥用麦某公开个人信息案"来看,"合理使用"的认定标准应当以"合法、正当、诚信且必要"等基本原则为基础,结合处理目的、处理方式以及是否存在《个人信息保护法》第 27 条提及的"明确拒绝"等具体要素进行判断.在涉及评分推荐类自动化决策时,还需要结合"对个人权益存在重大影响"等要素予以明确.
Abstract
Article 13 of the Personal Information Protection Law provides for the disclosure of personal information as an exception to the application of the Informed Consent Rule,but Article 27 and other provisions impose restrictions on such exceptions,such as"reasonable scope".In practice,there are several controversies on how to interpret"reasonable scope"or"reasonable use".And academic opinions such as the theory of controlling interest retention,reasonable expectation theory and efficiency balance theory have neglected to explore the theory of protection of disclosed personal information to different degrees,and there is a logical misunderstanding that the protection of disclosed personal information is weaker than undisclosed personal information.In the context of the domestic case of"Mr.Fa big data platform's abuse of Mr.Mai's disclosed personal information",the criteria for determining"reasonable use"should be based on the basic principles of"lawfulness,legitimacy,necessity and good faith",combined with specific elements such as the processing purpose,processing method and the existence of"explicit refusal"mentioned in Article 27 of the Personal Information Protection Law.In the case of automated decision-making involving rating recommendations,it is also necessary to clarify the factors such as"significant impact on the rights and interests of individuals".
关键词
已公开个人信息/合理使用/自动化决策/明确拒绝Key words
disclosed personal information/reasonable use/automated decision-making引用本文复制引用
出版年
2024
NETL
NSTL
万方数据