脱敏数据侵权的法律救济规则选择——以“卡—梅框架”为分析视角  

Choice of Legal Remedy Rules for Infringement of De-identified Data Dissemination——Taking“the C&M Framework”as an Analytical Perspective

作　　者：王雯灏 WANG Wenhao(School of Law,Tianjin University,Tianjin,300072,China)

机构地区：[1]天津大学法学院,天津300072

出　　处：《中州大学学报》2025年第1期51-56,共6页Journal of Zhongzhou University

摘　　要：当前我国数据脱敏所实现的不可识别程度是渐进的,但数据脱敏的法律效果却是断层的,法律规定的匿名化“绝对性标准”无法实现,司法实践中出现了匿名化数据向“去标识化”逃逸的现象。“卡—梅框架”可作为检验现有脱敏数据侵权法律救济规则与确立未来规则的标尺。基于“卡—梅框架”以是否承载法益和交易成本为基准,将脱敏数据划分为未承载法益的零散数据、承载法益的模糊化数据和准匿名化数据。依据“卡—梅框架”,未承载法益的零散数据侵权无需进行规制,模糊化数据侵权可适用财产规则保护人格权性权能,责任规则保护财产权性权能,准匿名化数据可适用责任规则的保护方式,如此方可实现脱敏数据利用与侵权规制的帕累托改进。The current level of unidentifiability achieved by data de-identification in China is progressive,but the legal effects of data de-identification are disjointed.The“absolute standard”of anonymization stipulated by law cannot be realized,leading to instances in judicial practice where anonymized data escape towards“de-identification.”“The C&M Framework”can serve as a benchmark for evaluating existing legal remedies for data de-identification infringement and establishing future rules.Based on“the C&M Framework”,data de-identification can be categorized into scattered data without legal interests,fuzzy data with legal interests,and quasi-anonymous data,using the criteria of bearing legal interests and transaction costs.According to“the C&M Framework”scattered data without legal interests do not require regulation for infringement,while fuzzy data infringement can apply a protection approach primarily based on property rules and supplemented by liability rules,and quasi-anonymous data can be protected primarily through liability rules.Only through this approach can a Pareto improvement be achieved in the utilization and regulation of de-identified data.

关 键 词：脱敏数据 去标识化 匿名化 数据侵权 “卡—梅框架” 

分 类 号：D923[政治法律—民商法学]