论生物识别信息界定中的识别标准及我国的建构  

Demystifying the Identification Standard Under the Notion of Biometric Data and Its Establishment in China

作　　者：褚婧一 CHU Jing-yi(China University of Political Science and Law)

机构地区：[1]中国政法大学法学院 [2]比利时荷语鲁汶大学

出　　处：《华中科技大学学报（社会科学版）》2023年第4期85-97,共13页Journal of Huazhong University of Science and Technology(Social Science Edition)

基　　金：国家留学基金管理委员会建设高水平大学公派研究生项目(留金选[2021]70号);国家社会科学基金一般项目“数据要素供给视角下的政府数据开放行政法治研究”(20BFX046)。

摘　　要：识别标准是生物识别信息概念的核心要素,也是厘清其与一般个人信息、敏感个人信息关系的重要依据。当下,生物隐私立法呈现出界定生物识别信息的两种路径:一种是基于特定信息处理活动产生的生物识别信息,另一种则是根据数据来源产生的生物特征信息。从欧盟立法经验看,前者以“已识别”为标准,存在过于依赖信息处理者主观目的与保护范围较为狭窄的不足;后者以“可识别与已识别”为标准,虽扩宽了保护范围,但易与医疗健康信息和生物技术概念相混淆,且存在沦为“笼筐式”概念的风险。鉴于此,我国应以“直接识别+已识别”构建生物识别信息的识别标准,并在规制法中构建“生物特征数据”概念,以弥补保护法中较高识别标准所带来的局限性。The identification standard is the core element of the notion of biometric data,and it is also crucial for determining its relationship with personal data and sensitive data.Bio-privacy legislation presents two paths for defining the notion of biometric data:one is to define“biometric data”based on specific data processing activities,and the other is to define“biometrics-based data”relying on data sources.According to the EU’s legislative experience,the former uses“identified”as the identification standard,which has the disadvantage of relying too much on the subjective purpose of data processors and the relatively narrow scope of protection.The latter,based on the criteria of“identifiable and identified”standard,broadens the scope of protection but is prone to confusion with the“data concerning health”and the concepts of biotechnology.Moreover,there is a risk of it becoming a“catch-all”concept.Given this,it is advised to use“direct identification+identified”as the identification standard for“biometric data”and make up for the deficiency of the protection law by constructing the concept of“biometrics-based data”in the regulatory law.

关 键 词：生物识别信息 生物特征信息 可识别 已识别 唯一性识别 

分 类 号：D923[政治法律—民商法学]