论同意阙如的个人信息交易合同的效力  

On the Validity of Personal Information Transaction Contracts Lacking Consent

作　　者：巩姗姗 Gong Shanshan

机构地区：[1]北京邮电大学,北京100876

出　　处：《法学杂志》2024年第3期106-122,共17页Law Science Magazine

基　　金：国家社科基金重大项目“网络空间政策法规的翻译、研究与数据库建设”(项目编号:20&ZD179)的阶段性研究成果。

摘　　要：根据《中华人民共和国个人信息保护法》第23条的规定,出售包含个人信息的数据时,数据出卖方应当征得个人信息主体单独同意。因担心未经个人有效同意导致个人信息交易合同无效,部分数据购买方不愿、不敢购买包含个人信息的数据。个人信息系数据处理者对个人信息主体的感受性关系,属于认识论范畴。个人信息经数据处理者收集成为数据处理者个人财产,因此数据处理者未经个人同意出售个人信息并非无权处分。同意是个人在了解个人信息处理风险基础上作出的参与个人信息处理法律关系的意思表示。基于《民法典》第153条以及《合同编通则司法解释》第16条,立足立法本意以及司法解释功能和定位,不能作出“未经单独同意的个人信息交易合同因违反法律进而无效”的认定。未经个人信息主体同意原则上不影响个人信息交易合同的效力。“同意”系个人信息主体降低个人信息处理风险的手段,遵循目的解释原则,未经个人同意的个人信息交易合同的效力构造应当重点考量个人信息交易是否增加了个人信息主体的风险。在数据受让人的安全保障能力不低于数据出让方且承诺不滥用个人信息时,个人信息交易合同的效力不受未经个人单独同意的影响。In accordance with Article 23 of the Personal Information Protection Law of the People's Republic of China,when the data seller sells data containing personal information to others,the individual consent of the personal information subject should be obtained.Some data buyers are reluctant or afraid to purchase data containing personal information for fear that the personal information transaction contract will be invalid without the valid consent of the individual.Personal information is the perceptual relationship between data processors and personal information subjects,which belongs to the category of epistemology.Once personal information is collected by the data processor,it becomes the personal property of the data processor,so the data processor is not unauthorized to dispose of personal information without consent.Consent is an expression of intent to participate in the legal relationship of personal information processing based on the understanding of the risks of personal information processing.Based on Article 153 of the Civil Code and Article 16 of the Judicial Interpretation of the General Principles of Contracts,grounded in the legislative intent as well as the function and position of judicial interpretation,it cannot be determined that"the contract for the transaction of personal information is invalid due to violation of the law without a separate individual information transaction contract."In principle,the absence of consent from the subject of personal information does not affect the validity of the information transaction contract.""Consent"is a means for the personal information subject to reduce the risk of personal information processing.Following the principle of purpose interpretation,the validity of personal information transaction contracts without consent should focus on whether the personal information transaction has increased the risk of the personal information subject.When the data recipient's security guarantee capability is not lower than that of the data transferor and promise

关 键 词：个人信息交易 同意 无权处分 同等安全原则 禁易数据 

分 类 号：D92[政治法律—法学]