数字经济视阈下App过度收集个人信息的治理对策——基于102份民事判决书的研究  

Governance strategies for excessive personal information collection by Apps in the context of the digital economy:A study based on 102 civil judgments

作　　者：孟醒 曾祥铭 MENG Xing;ZENG Xiangming(Law School,Liaoning University,Shenyang 110000,China)

机构地区：[1]辽宁大学法学院,辽宁沈阳110000

出　　处：《重庆邮电大学学报(社会科学版)》2025年第1期68-79,共12页Journal of Chongqing University of Posts and Telecommunications(Social Science Edition)

基　　金：辽宁省经济社会发展研究项目:公益诉讼的体系梳理与程序衔接研究(20241SQNRCKT-031);辽宁省社科规划基金项目:数字技术赋能辽宁省纠纷治理研究(L24AFX004)。

摘　　要：在数字经济视阈下,大众App过度收集个人信息的情况时常发生,对国家安全和公民个人权益构成影响,理应予以重视。文章采用实证研究的方法,筛选了102份涉及过度收集个人信息纠纷的民事判决书,并对其中的抗辩理由与裁判结果进行数据化分析。其中,抗辩理由主要涉及电子协议的知情同意原则、不存在侵权事实以及未造成实际损害三种情况;而在裁判结果方面,补救措施视角下的赔偿损失概率相对较小且金额较低,隐私协议视角下的胜诉率和获赔率存在不合理差距。肇因于此,文章结合具体案件,深入剖析了App过度收集个人信息案件中存在的实际问题,包括“知情同意”原则在实际应用中趋于形式化和概念化,使得其落实困难;同时,针对个人信息泄露后的责任追究,面临责任主体不明确以及追责结果不明确的困境;此外,囿于风险预防意识相对薄弱,尚未建立健全有效的惩罚性赔偿制度来遏制App过度收集个人信息乱象的迭生。为了针对App过度收集个人信息引发的问题进行有效治理,首先应聚焦于打破App“知情同意”原则的实践壁垒,具体包括充分告知用户收集内容、构建用户信息退出机制、配套恰当的信息收集同意类型等措施;其次,构建“收集责任制”以明确责任主体,并逐步推动公益诉讼的应用以解决追责难的桎梏;最后,在公益诉讼程序中完善惩罚性赔偿的适用,强化风险预防与侵权警示。如此,有助于协调好数字经济发展与个人信息保护的交互价值,对于全面推进中国式现代化、发展数字中国具有深刻意义。In thec contcxt of the dligital cconomy,cxccssive personal information collection by popular apps frequcntly occurs,posing risks to national sccurity and indlividual rights,and thus warrants significant attcntion.This study adopts an cmpirical approach,analyzing 102 civil judgmecnts rclatecd to cxcssive pcrsonal information collection.The defensc arguments commonly involve thrcc points:acdhercncc to the informed conscnt principlc through clectronic agrccments,the absencc of infringement,and lack of actual damagos.Regardling the rulings,compensatory mcasures are sceldom awarded,with low probabilitics and minimal amounts.Additionally,the succss ratcs and compensation ratios under privacy agrccmcnts rcvcal noticable discrepancics.Through an in-depth cxamination of thesc cascs,the stucdy identifies kcy issucs:the“informed conscnt"principle has hecomc incrcasingly formalistic and abstract,complicating its practical implementation;accountability for personal information leaks faces challenges due to unclear responsibility allocation and ambiguous outcomes;and a lack of strong preventive measures,coupled with an underdeveloped punitive damages system,fails to deter repeated violations effectively.To address these issues,governance measures should focus on breaking the practical barriers to the“informed consent”principle.This includes adequately informing users about the specifics of information collection,establishing user-friendly opt-out mechanisms,and offering tailored consent options.Moreover,a“collection liability”should be developed to clarify responsible entities,and the use of public interest litigation should be promoted to resolve challenges in holding violators accountable.Lastly,the public interest litigation process should incorporate punitive damages to strengthen risk prevention and provide a deterrent against future infractions.Such measures would help balance the dual values of digital economic growth and personal information protection,contributing meaningfully to advancing Chinese modernizat

关 键 词：个人信息保护 公益诉讼 惩罚性赔偿 知情同意原则 收集责任制 

分 类 号：D913[政治法律—民商法学] D912.1[政治法律—法学]