反思与建构:《个人信息保护法》归责原则研究  

Reflection and Construction: A Research on the Liability Principle in the Personal Information Protection Law

作　　者：邓社民 何厚仪 DENG Shemin;HE Houyi(School of Law,Xinjiang University,Urumqi Xinjiang 830046,China)

机构地区：[1]新疆大学法学院,新疆乌鲁木齐830046

出　　处：《乐山师范学院学报》2024年第5期109-117,共9页Journal of Leshan Normal University

摘　　要：我国《个人信息保护法》第六十九条设定的过错推定责任不足以调整日趋复杂的信息处理关系。现行立法之所以设定过错推定责任,原因在于:一是大数据时代下人类自然理性无法有效应对已高度“黑箱化”的信息处理活动;二是吸收借鉴了欧盟GDPR与德国的个人信息保护立法经验,即由信息处理方承担特殊归责原则。然而,随着算法等自动化技术兴起,侵权主体即便承担过错要件的举证责任,被侵权人的举证和诉讼能力依旧处于极端劣势。因此有必要从正义哲学观、道德立场和经济分析为视角,阐述构建无过错责任和过错推定责任二元归责体系的正当性,并以侵权主体是否使用自动化技术来界定该二元归责体系适用范围,最终实现数据的商业利益和信息权益保障之间的价值平衡。Personal Information Protection Law of China lacks precision and reasonableness in increasingly complex information processing activities by assuming single doctrine of presumption.The reason why the current legislation sets up the presumption of fault liability is twofold.Firstly,in the era of big data,human natural rationality is unable to effectively deal with highly"black-boxed"information processing activities;secondly,it draws on the experience of the EU GDPR and German personal information protection legislation,which applies a special principle that the information processor bears the special liability.However,with the rise of algorithms and other automated technologies,even if the infringing party bears the burden of proof for fault,the victim's ability to provide evidence and litigate remains at an extreme disadvantage.Therefore,it is necessary to articulate the justification for constructing a dual liability system of no-fault and presumed fault liability from perspectives of justice philosophy,moral stance,and economic analysis.Moreover,we should define the scope of this dual liability system based on whether the infringing party uses automated technology,ultimately achieving a value balance between commercial interests in data and the protection of information rights and interests.

关 键 词：个人信息保护法 个人信息处理者 过错推定责任 无过错责任 

分 类 号：D922.16[政治法律—宪法学与行政法学]