个人信息匿名化处理法律标准探究  

Research on the Legal Standard of Personal Information Anonymization

作　　者：程海玲 Cheng Hailing(School of Law,Chongqing University,Chongqing 400044,China)

机构地区：[1]重庆大学法学院,重庆400044

出　　处：《科技与法律（中英文）》2021年第3期26-35,共10页Science Technology and Law（Chinese-English Version）

基　　金：武汉大学网络治理研究院2020年度重点研究课题“数据权利的体系化研究”(ICG202002)。

摘　　要：个人信息匿名化处理法律制度作为联通个人信息保护与个人信息流通利用的制度桥梁,能够以一种隐私友好的方式满足社会的信息需求。我国现行“无法识别特定个人且不能复原”的匿名化处理法律标准缺乏可操作性,难以有效规范匿名化处理实践。我国可以确立操作方法标准与识别风险检验标准协同的匿名化处理法律标准:关于操作方法标准,可以在技术领域确定适用于直接标识符和间接标识符的匿名化处理措施指南;关于识别风险检验标准,可以引入“蓄意侵入者检验”标准,明确规定侵入者的识别动机和识别能力。通过操作方法维度与识别风险检验维度的协同作用,最终实现“无法识别特定个人且不能复原”的匿名化处理法律效果。As a bridge between personal information protection and personal information circulation,the legal institution of personal information anonymization can meet the information needs of the society in a privacy friendly way.Chinese current legal standard of anonymization,namely"unable to identify specific individuals and cannot be reverted",lacks operability and is difficult to regulate the practice of anonymization effectively.We can establish the legal standard of anonymization in the coordination of operation method standard and identification risk test standard.As for the operation method standard,we can establish the guidance of anonymization measures applicable to direct identifier and indirect identifier in the technical field.As for the identification risk test standard,we can introduce"a motivated intruder test"by specifying the identification motivation and identification ability of the intruder.Through the synergy of operation method dimension and identification risk test dimension,the"unable to identify specific individuals and cannot be reverted"legal effect of anonymization will finally be achieved.

关 键 词：个人信息 匿名化处理 法律标准 直接标识符 间接标识符 识别风险检验 

分 类 号：D912[政治法律—法学]