个人信息保护立法面临的两难选择

个人信息权益本身是一个较为复杂的保护对象,其中存在着多元的利益主体和多组权利关系,立法一方面需要借鉴现有的实践和域外经验,一方面又要兼顾内在的体系,再加之其本身的因素,就会带来多处“两难选择”,其中包括:保护范围的延伸给合法性基础带来的调整应当是趋严还是趋宽、合法性基础是否应当贯穿整部立法、是否应当允许特殊场景之下的同意标准出现一些变动甚至是例外、是否应当对权利进行合理限制以起到一定的正向激励作用等,笔者及团队在行业研究过程中总结了上述现象,结合域内外的立法比较对当前《个人信息保护法(草案)》的具体内容进行分析,并尝试提出解决问题的方向和建议。

The Dilemmas Facing Personal Information Protection Legislation

Personal information rights and interests are a complex object of protection in legislation,in which there are multiple subjects of interest and multiple groups of rights relationships.The legislation needs to draw on the existing practice and overseas experience,and take into account the internal system,coupled with its own factors,presents multiple"dilemmas",including:whether the extension of protection should lead to a tighter or looser adjustment of the legitimate basis,whether the legitimate basis should run through the entire legislation,whether to allow some changes or even exceptions to the standard of consent in special cases,and whether to impose reasonable restrictions on the right to play a certain positive incentive,etc.The author and his team summarized the above difficult choices,analyzed and argued the current draft of the Personal Information Protection Law,and tried to propose directions and suggestions for solving the problem with the comparison of domestic and foreign legislation.