论个人信息处理的“合同所必需”规则  

On the Rules of“Contract Mandatory Clauses”in Personal Information Processing

作　　者：陈骞 CHEN Qian(Law School,Changsha University of Science and Technology,Changsha 410114)

机构地区：[1]长沙理工大学法学院,湖南长沙410114

出　　处：《行政法学研究》2023年第6期134-145,共12页ADMINISTRATIVE LAW REVIEW

基　　金：2022年度国家社科基金青年项目“敏感个人信息条款适用问题研究”(项目编号:22CFX07)。

摘　　要：《个人信息保护法》新增“合同所必需”作为合法处理个人信息的条件之一,但该规则在适用中存在个人信息处理者以增加服务内容、扩大个人信息需求以及降低信息处理透明度的方式侵害用户权益的风险。通过分析欧盟“合同所必需”规则的适用前提、适用标准、适用条件,思考对规则异化的风险进行控制与化解的路径,可为我国建立健全相关适用规则提供借鉴。“合同所必需”规则的适用基础仍是知情同意,其本身不应是一项单独的法定事由,在适用时必须明确“合同依法成立并生效”这一独特前提,在此基础上依托合同自由与公平原则建立相应适用规范,在合法与正当原则下确立“关联性”标准,在目的明确与最小化原则下确立“必需性”标准,在强化告知义务中确立“透明度”标准。同时,基于法律的禁止性规定,在敏感个人信息处理和利用信息进行自动化决策中不能适用该规则。The provisions of the“contract mandatory clauses”added in the“Personal Information Protection Law”are regarded as one of the conditions for legal processing of personal information,but there is a risk that the personal information processor may infringe the rights and interests of users by increasing the service content,expanding the personal information demand and reducing the transparency of information processing when such rule is applied.After analyzing the application premise,application standard,application conditions of the EU“contract mandatory clauses”rule and the development process of relevant rules in China,the path to control and resolve the risk of rule alienation was considered,which will provide reference for China to establish and improve relevant applicable rules.The application of the rule of“contract mandatory clauses”is based on informed consent,which should not be a separate legal matter in itself,and the unique premise of“the contract is legally established and takes effect”should be clarified when it is applied.On this basis,the corresponding applicable norms were established according to the principles of freedom and fairness of contract.Under the principles of legality and legitimacy,the“relevance”standard was established.Under the principles of clear purpose and minimization,the“necessity”standard was established.In the strengthening of the obligation to inform,the“transparency”standard was established.At the same time,based on legal prohibitions,this rule cannot be applied to sensitive personal information processing and the use of information for automated decision-making.

关 键 词：个人信息处理 合同所必需 知情同意 用户服务协议 

分 类 号：D922.16[政治法律—宪法学与行政法学]