敏感个人信息单独同意规则的适用困境、规范解释与补强  

The Application Dilemma,Normative Interpretation,and Reinforcement of the Separate Consent Rule for Sensitive Personal Information

作　　者：项唯鹏 贾爱玲[1] XIANG Weipeng;JIA Ailing(Zhejiang A&F University,Hangzhou 311300,China)

机构地区：[1]浙江农林大学文法学院,浙江杭州311300

出　　处：《金陵科技学院学报(社会科学版)》2025年第1期38-45,共8页Journal of Jinling Institute of Technology(Social Sciences Edition)

基　　金：教育部人文社会科学青年基金项目“推荐算法侵害民事权益的责任问题研究”(23YJC820050)。

摘　　要：《中华人民共和国个人信息保护法》对敏感个人信息的处理设置了单独同意规则。在司法实践中,单独同意规则面临敏感个人信息界定标准不一、单独同意规则形式要件模糊和违反单独同意规则成本较低等困境。鉴于此,应当对单独同意规则进行规范解释,明确敏感个人信息的核心要素和单独同意规则的形式要求。在实际操作中,应采用法律明文规定、场景化判断、体系化风险评估三个标准来灵活动态地界定敏感个人信息的范围。明确合理使用与侵权豁免的范围,单独同意的形式应以特定目的下单独选框的勾选为标准,信息处理者应事先拟定退出机制,违背规则后的归责可视情况适用无过错责任原则或过错推定原则。此外,应弹性适用惩罚性赔偿制度并引入最低赔偿数额制度,为敏感个人信息权益的救济提供保障。China s Personal Information Protection Law establishes a separate consent rule for processing sensitive personal information.In judicial practice,the separate consent rule encounters challenges such as varied criteria for defining sensitive personal information,unclear formal requirements for the rule,and low cost of violating the rule,among others.In view of this,the separate consent rule should be normatively interpreted in order to elucidate the fundamental components of sensitive personal information and the form requirements of the rule.In practical application,three criteria should be adopted for flexibly and dynamically defining the scope of sensitive personal information:statutory provisions,scenario-based judgment,and systematic risk assessments.It is imperative to establish distinct boundaries for legitimate use and infringement exemptions.The form of separate consent should be standardized as the selection for a specific purpose in separate checkboxes.Information processors should pre-establish opt-out mechanisms.The liability attribution after violating the rule may apply the principles of no-fault liability or presumption of fault depending on circumstances.Additionally,the system of punitive damages should be applied flexibly,and a system of minimum compensation amounts should be introduced to provide safeguards for the rights and interests of sensitive personal information.

关 键 词：敏感个人信息 单独同意 告知形式 退出机制 归责原则 惩罚性赔偿 

分 类 号：D923.8[政治法律—民商法学]