个人信息处理规范依据的公私二分  

The Public-private Dichotomy underpinning the Normative Basis for the Processing of Personal Information

作　　者：李群涛 Li Quntao

机构地区：[1]烟台大学法学院,山东烟台264000

出　　处：《法律科学(西北政法大学学报)》2025年第2期87-102,共16页Science of Law:Journal of Northwest University of Political Science and Law

基　　金：国家社科基金一般项目(20BFX107)“网络环境中的同意机制构建研究”。

摘　　要：一般认为,《个人信息保护法》第13条第1款中7项个人信息处理规范的适用主体包含公共部门与私营部门,即公私不分。然而,该款所借鉴的GDPR第6条第1款第1分款,虽表面上也似公私不分,但实质上是公私二分。公私二分的原理是:在大数据时代,公法活动、私法活动的进行均深度仰赖个人信息处理,故公法活动、私法活动的自由范围(“法无授权即禁止”和“法无禁止即自由”)决定着个人信息处理的自由范围,而有关个人信息处理的自由范围正是个人信息处理规范建立的依据。在公私二分思路下,应将第13条第1款解释为:公共部门仅能适用部分规范,总体上以禁止处理个人信息为原则,仅因履行法定职责、维护公共利益方可处理个人信息;私营部门则可适用全部规范,总体上以允许处理个人信息为原则,仅因违反三类禁止性规定方禁止其处理个人信息。如是,第13条第1款就能与数据要素流通利用的政策导向和时代需求相适应。It is generally held that the application subjects of the seven legal bases for personal information processing in Paragraph 1 of Article 13 of the Personal Information Protection Law cover both public sectors and private sectors,which means there is no distinction between the public and the private.However,although Subparagraph of Article 6 Paragraph 1 of the GDPR,which this provision refers to,seemingly also lacks the distinction between the public and the private,it is actually based on the principle of distinguishing between the public and the private.This principle lies in that in the era of big data,both public activities and private activities rely deeply on personal information processing.Therefore,the scope of freedom of the former two(i.e.,“prohibited without authorization by law”and“permitted unless prohibited by law”)should determine the scope of freedom of the latter,and the rule regarding the scope of freedom of the latter is precisely the legal bases for personal information processing.Under the thought of distinguishing between the public and the private,Paragraph 1 of Article 13 should be interpreted as follows:Public sectors can only apply to certain legal bases for personal information processing.Generally,the principle is to prohibit processing,and processing is only allowed when fulfilling statutory duties or safeguarding public interests.Private sectors can apply to all legal bases for personal information processing.Generally,the principle is to allow processing,and processing is prohibited only when violating three types of prohibitive provisions.In this way,Paragraph 1 of Article 13 can be compatible with the policy orientation of the circulation and utilization of data elements and the requirements of the times.

关 键 词：个人信息处理 法无授权即禁止 法无禁止即自由 

分 类 号：D911.01[政治法律—宪法学与行政法学]