中国个人信息保护法草案若干问题  

Research on the Draft of China's Personal Information Protection Law

作　　者：寿步[1] 党玉洁 Shou Bu;Dang Yujie(Law School,Shanghai Jiao Tong University,Shanghai 200240,China)

机构地区：[1]上海交通大学法学院,上海200240

出　　处：《科技与法律（中英文）》2021年第3期111-118,共8页Science Technology and Law（Chinese-English Version）

基　　金："Cyberspace Security Law Issues Research"(16JXYB01),supported by"the Fundamental Research Funds for the Central Universities".

摘　　要：在个人信息保护法草案中,个人信息的定义应修改为“个人信息是能够单独或者与其他信息结合识别有生命的自然人的各种信息,不包括匿名化处理后的信息。”并加一款体现“识别”+“关联”的立法思路的文字。个人信息处理的列名操作应该由七个变更为十一个,即收集、存储、加工、使用、交易、提供、公开、查阅、复制、更正、删除等。第六十九条匿名化定义的“无法识别”且“不能复原”与第二十四条第二款规定的“重新识别”之间存在矛盾,需要修改。In China's Personal Information Protection Law(Draft),the definition of personal information needs to be revised,and it should be stipulated as"personal information is any kind of information that can identify a living natural person alone or combined with other information,excluding which has been processed via the anonymization".Furthermore,a new clause as a supplement should be added in order to reflect the legislative idea of"identification"+"relevance".The listed operation items of personal information processing should be modified from seven items to eleven items,then that will be:collection,storage,processing,using,transaction,providing,disclosure,consultation,copy,correction and erasure.There is a contradiction between Article 69 and the Clause 2 of Article 24,detailed as:the terms"impossible to identify"and"unable to be recovered"which is mentioned in the definition of anonymization in Article 69,contradicts with the term"re-identify"referred in the Clause 2 of Article 24,and this contradiction should be resolved.

关 键 词：个人信息保护 个人信息 个人信息处理 匿名化 

分 类 号：D912[政治法律—法学]