人工智能时代个人数据保护的困境与出路  

The Dilemma and the Solution of Personal Data Protection in the Era of Artificial Intelligence

作　　者：武腾[1] WU Teng(Law School,Central University of Finance and Economics,Beijing 100081,China)

机构地区：[1]中央财经大学法学院,北京100081

出　　处：《现代法学》2024年第4期116-130,共15页Modern Law Science

基　　金：2022年度北京市社会科学基金青年项目(22FXC019)“数字经济深化发展背景下企业衍生数据法定共享研究”。

摘　　要：人工智能的发展离不开对大量个人数据的处理。只有妥当适用《个人信息保护法》中的目的限制原则和有关个人知情权、决定权的规则,才能有效保障人工智能安全发展。目的限制原则包括“两肢”,一是处理目的自身的限制,二是处理目的对处理方式的限制。目的限制原则与人工智能发展之间有紧张关系,面临适用困境。该原则丧失实效,既会造成最小必要原则等多项原则难以适用,又不利于个人知情权、决定权的行使,还易致使个人数据交易欠缺自愿性、公平性。我国目的限制原则采用“宽进严出”模式,个人数据处理者不必将人工智能发展和应用中对个人数据的每一步处理活动加以披露,而是应分别披露训练机器学习模型、制作用户标签和画像、提供个性化服务等不同处理目的、处理方式,并揭示其各自风险。经由人工智能制作用户标签和画像的,属于个人数据处理活动。该处理活动只有同时包含体现公平价值的设计,才具有充分的合理性。此外,还应构建程序性规则以保障个人能够以集体的方式行使个人对标签、画像享有的有限决定权。The development of artificial intelligence(AI)relies on processing of large amounts of personal data.The principle of purpose limitation,the rules on individual’s right to know and right of discretion in the Personal Information Protection Law should be properly applied to guarantee the development and safety of AI.That principle has“two limbs”;the first is the limitation on processing purpose itself,and the second is the limitation on processing methods according to processing purpose.There is a tension between the principle of purpose limitation and the development of AI,which leads to the application dilemma of the principle.That gives rise to much difficulty to apply other principles such as the principle of data minimization,would be adverse to the exertion of individual’s right to know and right of discretion,and impairs the voluntariness and fairness in personal data transactions.While the principle of purpose limitation in China allows purposes with broad content,it requires processing methods being directly related to those purposes.Against this background,it is not necessary to disclose each step of the processing of personal data,but to disclose all sorts of processing purposes such as training machine learning models,user tagging and data profiling,and providing personalized services,and to respectively disclose their risks.User tagging and data profiling through AI are processing of personal data.These processing activities per se are not reasonable;they should include designs that reflect the value of fairness.Procedural rules are necessary for individuals to collectively exercise the limited right to determine user tags and data profiling.

关 键 词：人工智能 个人数据 目的限制原则 数据画像 个人信息保护 

分 类 号：D923[政治法律—民商法学]