控制归责理论下个人信息处理民事责任的分配——以《中华人民共和国个人信息保护法》第21条为中心的分析  

Allocation of the Liability for Personal Information Infringement Under the Control-based Attribution Theory—Focus on Art.21 of the Personal Information Protection Law

作　　者：云晋升 YUN Jin-sheng(Academy for China's Rule-of-Law,East China University of Political Science and Law,Shanghai 201620,China)

机构地区：[1]华东政法大学中国法治战略研究院,上海201620

出　　处：《东北师大学报(哲学社会科学版)》2025年第2期126-133,共8页Journal of Northeast Normal University(Philosophy and Social Science Edition)

基　　金：国家社会科学基金项目(23AFX014);中国博士后科学基金面上资助项目(2022M721175)。

摘　　要：立法未对个人信息委托处理下的责任分配规则作出规定,学界亦对此存在较大争议。责任的分配模式主要有两种,分别是完全的替代责任和部分的替代责任。控制者是风险的创设者和有效预防者,“谁控制,谁负责”的基本理念具有正当性和合理性,数据的控制者才是个人信息侵权责任的承担主体。委托人通过个人信息处理委托合同对受托人具有法律上的控制力,其借助于受托人间接取得了数据的控制。基于侵权法传统的过错原则,受托人应当获得优待。优待表现为通常情况下受托人民事责任的免除,委托人对此承担替代责任。但是如果受托人具有主观过错、违反法定义务、取得数据控制等任意情形之一,仍需要向个人信息主体承担民事责任。There are no relevant provisions about allocation of the liability in the case of processing under the authority of the controller,and the academic community is also engaged in ongoing scientific discourse.There are two normative models:full vicarious liability and partial vicarious liability.The controller is the creator and effective preventer of risks.The fundamental principle of“who controls,who is responsible”is legitimate and reasonable,and the data controller is the subject that bears personal information infringement liability.The data controller has legal control over the processor through the entrusting contract,and indirectly obtains control of the data through the processor.Based on the traditional tort law principle of fault,the processor should have privileges.One privilege of the processor is normally in the exemption of the processor's civil liability under normal circumstances,with the controller bearing vicarious liability for this.However,the processor should also be liable for some specific wrong doings,which include intentional infringement,violation of statutory obligations,and acquisition of control status.

关 键 词：个人信息 委托处理 控制 侵权 责任归属 

分 类 号：D923[政治法律—民商法学] D922.16[政治法律—法学]