论个人信息保护中的必要原则:法律理解、实践困境与化解思路  

The Necessary Principles in Personal Information Protection:Legal Understanding,Practical Challenges and Resolutions

作　　者：杨婕 Yang Jie(The Institute for Data Law,China University of Political Science and Law,Beijing 100088)

机构地区：[1]中国政法大学数据法治研究院,北京100088

出　　处：《信息安全研究》2023年第7期675-680,共6页Journal of Information Security Research

摘　　要：必要原则作为个人信息保护中的基本原则,通过限制个人信息处理者不合理、过度地处理个人信息,以实现保护个人的人格尊严与自主、管理与控制个人信息安全风险的功能作用.但是,由于个人信息保护与互联网经济特征间存在冲突,以及严格适用必要原则与数字经济创新发展需要的自由、开放环境间存在矛盾,导致必要原则在落地过程中产生诸多现实困境.从必要原则的概念定位、制度衔接以及监管救济方面出发,提出应弹性化适用必要原则,通过缓解个人信息保护和数据有效利用之间的紧张关系,以实现个人权益、企业利益和公共利益间的有效平衡,从而推动数字经济的健康发展.The principle of necessity,as a fundamental principle in personal information protection,limits the unreasonable and excessive processing of personal information by processors to protect the personal dignity,autonomy,and the ability to manage and control the risks of personal information security.However,conflicts between personal information protection and the characteristics of the Internet economy,as well as contradictions between the strict application of the principle of necessity and the needs for a free and open environment for innovation and development in the digital economy,have led to many practical difficulties in the implementation of the principle of necessity.This article starts with the concept positioning,institutional connection,and regulatory relief of the principle of necessity,proposing that the principle of necessity should be flexibly applied to ease the conflict and tension between personal information protection and effective data utilization,to achieve an effective balance between personal rights,corporate interests,and public interests,and promote the healthy development of the digital economy.

关 键 词：个人信息保护 个人信息处理 必要原则 最小化 比例原则 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]