诚信原则:个人信息保护与利用平衡的信任路径  

The Principle of Good Faith:The Path to Balance Protection and Utilization of Personal Information

作　　者：许可[1] Xu Ke

机构地区：[1]对外经济贸易大学法学院

出　　处：《中外法学》2022年第5期1143-1162,共20页Peking University Law Journal

基　　金：国家社会科学基金重大项目“民法在建设职责明确、依法行政的政府治理体系中的作用研究”(项目编号:21ZDA050)的阶段性成果。

摘　　要：如何平衡个人信息保护与利用,是数字时代的核心议题之一。《个人信息保护法》在“合法、正当、必要原则”外增设“诚信原则”,开辟了“基于诚信的平衡路径”。该路径有效融合“场景机制”,弥补“比例机制”和“风险机制”的立法缺憾,化解了数字信任困境。作为一般条款,诚信原则可具体化为三类次级机制:“补充处理者义务的诚信机制”对处理者苛以不得欺诈、操纵以及公平对待个体的概括义务;“限制信息主体权利的诚信机制”禁止个体滥用其在信息处理活动中的权利,损害他人合法权益;“平衡信息主体与处理者利益的诚信机制”一方面要求国家机关处理者承担忠实、勤勉的信义义务,另一方面引入正当利益条款,以调和私主体处理者和个体的利益冲突。作为授予自由裁量权的空白委任状,诚信原则亦要求执法者、司法者秉持诚信,以个人信息保护与利用平衡为宗旨,妥当解释法律规范、填补法律漏洞,最终铸就原则与规则相互融贯的个人信息柔性法治秩序。One core topic in this digital age is how to balance between protection and utilization of personal information. The Personal Information Protection Law adds the principle of good faith to the principle of legality, legitimacy and necessity, creating a balanced path based on good faith. This path effectively integrates the “context-based approach” to make up for the shortcomings of the “proportionality-based approach” and “risk-based approach”, and solves the digital trust deficit. The principle of good faith can be categorized into the following three sub-mechanisms. First, “good faith mechanism to supplement the obligations of controllers” imposes a general obligation on controllers not to defraud, manipulate and treat individuals fairly. Second, “good faith mechanism to limit the rights of information subjects” prohibits individuals from abusing their rights in information processing activities to the detriment of rights of others. Third, “integrity mechanism to balance the interests of information subjects and processors” requires state organs to assume the fiduciary duty of faithfulness and diligence, and introduces a legitimate interest clause to reconcile the conflicting interests of private controllers and individuals. As a carte blanche of appointment granting discretion, the principle of good faith requires that law enforcers and judicial personnel should also uphold good faith, balance between personal information protection and utilization as the purpose, properly interpret legal rules, fill legal loopholes, and finally implement the flexible rule of law order for personal information protection based on the rules-principle model.

关 键 词：个人信息 诚实信用 数字信任 

分 类 号：D922.16[政治法律—宪法学与行政法学]