个人信息保护立法中“同意规则”之检视  

Review of Consent Rules in Personal Information Protection Legislation

作　　者：翟相娟[1] ZHAI Xiang-juan(School of Law,Huaqiao University,Quanzhou,Fujian 362021,China)

机构地区：[1]华侨大学法学院

出　　处：《科技与法律》2019年第3期58-65,共8页Science Technology and Law

摘　　要：大数据时代人们产生了"同意失灵"和"同意过度"的双重担忧。对此,欧盟《统一数据保护条例》通过对同意规则的修正和例外事由的增补给予回应,既体现出对同意规则的强化也对现实作出了不小的妥协。纵观我国个人信息保护的相关立法,基本体现了以"同意规则"为主导的个人信息自主权保护模式,但这一模式的理论局限和现实挑战已日益凸显。为此,我们有必要在未来的个人信息保护法中适度弱化同意规则的地位,同时应细化和充实同意规则的内容,即根据个人信息处理主体、个人信息敏感度和个人信息处理的不同阶段来区分同意要求和同意方式。With the advent of the era of big data,people have raised the dual concerns of"consent failure"and"excessive consent".In response,the European Union′s General Data Protection Regulation respond to the amendment of consent rules and the supplement of exceptions,which not only shows the reinforcement of consent rules but also makes a considerable compromise to the reality.Throughout our country′s relevant legislation on personal information protection,it basically reflects the mode of personal information autonomy protection dominated by"consent rules",but the theoretical limitations and practical challenges of this mode have become increasingly prominent.For this reason,it is necessary for us to moderately weaken the status of consent rules in the future personal information protection law.Meanwhile,we should refine and enrich the content of consent rules,that is,according to the subject of personal information processing,personal information sensitivity and different stages of personal information processing,consent requirements and consent methods are distinguished.

关 键 词：个人信息 同意规则 信息主体 信息处理主体 

分 类 号：D920[政治法律—法学]