论个人信息的禁止处理原则——以《个人信息保护法》第10条的解释为展开  

On the Principle of Prohibiting Illegal Processing of Personal Information

作　　者：王伟伟[1] WANG Weiwei

机构地区：[1]北京市社会科学院法治研究所

出　　处：《经贸法律评论》2022年第5期108-123,共16页Business and Economic Law Review

基　　金：北京市社会科学院2022年度重点项目“数字经济立法基础理论问题研究”(项目批准号:2022A6830)。

摘　　要：《个人信息保护法》第10条规定的个人信息禁止处理原则,以《宪法》“人格尊严”条款及《民法典》“个人信息保护”的规定为基础,对于个人信息处理的合法性判断、个人信息权益保护等有规范效力。第10条所涉规定具有开放性。在解释和适用第13条个人信息处理的合法性规则时,应结合第10条所规定的禁止处理原则进行。个人信息禁止处理原则体现了个人信息权益保护优先的理念,但并非禁止个人信息的合理流动。在欠缺明确规则基础的情形下,应结合合目的性、最小化以及比例等原则,判断是否存在个人信息的非法处理。有疑义时,固然应在个案中具体判定个人信息处理合法与否,但应以个人信息的禁止处理原则为基本的出发点和结果约束。Article 10 of the Personal Information Protection Law of PRC, which stipulates the principle of prohibiting illegal personal information processing, is based on the provisions of the Constitution on “human dignity” and the PRC Civil Code on “personal information protection”,and is of great significance to the legal judgment of the lawfulness of personal information processing, the balance between the protection of the rights of personal information and processing of personal information. The rules on the legality of the processing of personal information as stipulated in Article 13 shall be understood under the principle of prohibiting of personal information processing under Article 10. Article 10 of the Personal Information Protection Law is open. In the absence of a clear rule basis for the processing of personal information, Article 10 shall be interpreted and applied in the principle of purposefulness and proportionality. The principle of prohibiting personal information processing reflects the priority of the protection of personal information. However, the flow of personal information is not totally prohibited. In absence of clear legal basis, the principle constitutes only the starting point which is not conclusive, but meanwhile as an essential constraint.

关 键 词：禁止处理 个人信息权益 开放条款 合法性 

分 类 号：D922.16[政治法律—宪法学与行政法学]