个人信息处理必要性原则的规范体系研究  

Research on the Normative System of the Necessity Principle of Personal Information Processing

作　　者：项定宜 XIANG Ding-yi

机构地区：[1]华东政法大学博士后科研流动站 [2]东北林业大学文法学院

出　　处：《北方法学》2021年第5期27-37,共11页Northern Legal Science

基　　金：中国博士后科学基金第67批面上资助项目“大数据时代基于数据类型化的私益保护研究”(2020M671059);中央高校基本科研业务费专项项目“人工智能时代数据利用与保护法律问题研究”(2572020BN02)的阶段性成果。

摘　　要：我国《民法典》和《个人信息保护法》均规定个人信息处理应当遵循必要性原则,但是没有对必要性原则进行清晰地界定。必要性原则源于比例原则,个人信息处理行为反映了"禁止过度"的要求,应当适用必要性原则限制个人信息处理行为,以实现个人信息多元利益的平衡。必要性原则体现和渗透于目的限定规则、最小化处理规则、存储期限规则和删除规则。个人信息处理应当限于实现合乎法律规定的正当目的所必要之范围,个人信息处理的范围、数量应当与该处理目的相匹配或成比例,个人信息的存储期限应当为实现处理目的所必要的最短时间。个人信息的处理目的已经实现、期限届满或者处理目的无法实现时,信息主体有权请求删除个人信息。The Civil Code of China and Personal Information Protection Law stipulate that personal information processing should follow the principle of necessity.However,there is no clear connotation of the principle of necessity in them.The principle of necessity originates from the principle of proportionality.Personal information processing reflects the requirement of"prohibition of excess".The principle of necessity should be applied to limit the personal information processing in order to realize the balance of multiple interests of personal information.The principle of necessity should embody and permeate the rule of purpose limit,rule of data minimization,rule of storage limitation and rule of data erasure.The processing of personal information should be limited to the legitimate purpose prescribed by law.The scope and quantity of personal information processing should match or be proportional to the purpose of processing.The storage period of personal information should be the shortest time necessary to realize the purpose of processing.The information subject has the right to delete personal information if purpose of personal information processing has been achieved,or storage period has expired,or the purpose would not be achieved.

关 键 词：必要性原则 目的限定规则 最小化处理规则 存储期限规则 删除规则 

分 类 号：DF52[政治法律—民商法学]