个人信息双重风险性损害判定与赔偿框架的重塑  

Reconstructing the Framework for Determining and Compensating Dual Risk-Based Damage to Personal Information

作　　者：王雪 Wang Xue

机构地区：[1]内蒙古大学法学院

出　　处：《人权》2024年第5期136-158,共23页Human Rights

基　　金：2021年国家社科基金一般项目“新一轮知识产权国际争端解决机制的变革与重构及我国的因应对策研究”(项目编号:21BFX101)阶段性成果。

摘　　要：进入大数据时代,个人信息泄露所引发的双重风险性损害具有特殊性。客观风险性损害无参照的非现实性与主观风险性损害认定的高门槛成为信息主体索赔的阻碍,以往支持风险性损害的思路难以适用于个人信息领域。个人信息双重风险性损害的理论支撑与赔偿机制需要重新探索。信息主体基于知情权对个人信息财产价值的控制成为个人信息客观风险性损害的理论基础,而精神损害的独立性与“严重”标准的淡化均使得个人信息主观风险性损害的认定可从宽解释。面对信息主体索赔,首先,法院需要评估并量化风险性损害的级别。其次,立法需引入法定赔偿制度以固定个人信息财产价值的范围,且个人信息处理者的过错在民事责任划分中应得到重点考量。最后,构建特别代表人诉讼机制可有效应对个人信息侵权群体性纠纷并缓解信息主体诉讼负担。In the era of big data,the dual risk-based damage associated with personal information leakage presents unique challenges.The unrealistic nature of objective risk-based damage without benchmarks and the high threshold for determining subjective risk-based damage have become obstacles for information subjects seeking compensation.Traditional approaches to supporting risk-based damage are inadequate in the realm of personal information.The theoretical support and compensation mechanisms for dual risk-based damage of personal information need re-exploration.The information subject's control over the value of personal information assets based on the right to know forms the theoretical basis for objective risk-based damage.Additionally,the independence of mental suffering and the relaxation of the"serious"standard allow for a broader interpretation of subjective risk-based damage.In addressing claims by information subjects,first,courts need to assess and quantify the level of risk-based damage;second,legislation should introduce a statutory compensation system to define the range of personal information asset value,with a focus on the fault of personal information processors in civil liability;finally,establishing a special representative litigation mechanism can effectively address collective disputes over personal information infringement and alleviate the litigation burden on information subjects.

关 键 词：信息主体 个人信息处理者 客观风险性损害 主观风险性损害 知情权 

分 类 号：D923[政治法律—民商法学] D922.16[政治法律—法学]