《个人信息保护法(草案)》的立法评析与完善思考

《个人信息保护法(草案)》吸收了近年来个人信息保护的国际经验以及国内《网络安全法》《民法典》等立法、标准和实践经验,既与国际接轨,又不乏中国特色.现有草案存在部分场景坚持"同意为王"的治理模式、缺乏对个人信息处理者"合法利益"的保障、未区分"去标识化"个人信息与一般个人信息处理规则等问题.在体系定位方面,正在制定中的个...

Legislative Analysis and Improvement of Personal Information Protection Law(Draft)

The personal information protection law(Draft)has absorbed the international experience in recent years,as well as domestic legislation experience,such as cybersecurity law and civil code and standards practical experience.It is not only in line with international standards,but also has Chinese characteristics.There are some problems in the current draft,such as adhering to the"consent is king"governance model in some scenarios,lack of protection for the"legitimate interests"of personal information processors,and failure to distinguish"de identification"personal information from general personal information processing rules.In terms of system positioning,the coordination between the personal information protection law and the basic laws is very important.In the aspect of revision and improvement of the draft,it is suggested to clarify the division of powers and responsibilities of the regulatory authorities and avoid multi-supervision;refine the fine standard to avoid excessive discretion of law enforcement bodies;the definition of sensitive personal information should be included in the dynamic evaluation factors;and the objective criteria should be adopted in the determination of significant impact of automated decision-making.