行政机关处理个人信息活动的合法性分析框架  

An Analytical Framework for the Legitimacy of Personal Information Processing by Administrative Agencies

作　　者：王锡锌[1] Wang Xixin

机构地区：[1]北京大学法学院

出　　处：《比较法研究》2022年第3期92-108,共17页Journal of Comparative Law

基　　金：国家社会科学基金重大项目“社会信用体系的法律保障机制研究”(批准号:21&ZD199)资助。

摘　　要：我国个人信息保护法主要以私人机构处理个人信息活动为场景,建构了处理个人信息活动的规制框架。尽管该法对国家机关与私人机构处理个人信息活动规定了“一体调整”模式,但与私人机构相比,国家机关为履行法定职责处理个人信息的活动,在权力基础、行为目的、行为性质、归责机制等方面均存在差异。从行政法角度看,行政机关处理个人信息的活动具有行政性、高权性、强制性,符合典型的行政行为特征。因此,对行政机关处理个人信息活动的法律控制,既需要适用个人信息保护法的基本规制框架,也需要引入行政行为合法性分析框架,从权限合法、内容合法、程序合法等维度,对行政机关处理个人信息的活动进行合法性控制,并引入相应的行政法律责任及归责机制。The regulatory framework for processing personal information provided by China's Personal Information Protection Law(PIPL)is primarily designed to regulate data-processing activities by private entities.That said,a unified regulatory framework set by PIPL is nonetheless assumed to apply to activities conducted by both private and public entities.However,it should be noted that administrative agencies differ from the private entities in their nature of,aim and legal ground for data processing activities.Personal data processing by administrative agencies to perform statutory obligations constitutes an administrative act,and therefore shall be subject to the legal mechanisms set by not only the PIPL,but also by special administrative law governing the legitimacy of corresponding administrative acts.The latter shall govern the administrative processing of personal information from the respect of the power,content and procedure,and introduce corresponding administrative legal responsibility and a mechanism of accountability.

关 键 词：个人信息保护 法定职责 行政行为 比例原则 

分 类 号：D922.16[政治法律—宪法学与行政法学]