實名制環境下個人信息保護的基本原則重構

Rebuilding Basic Rules in Personal Information Protection under Real-Name Cyberspace

傳統個人信息保護原則是基於個人信息主體確定而義務主體不確定的對世權保護原則；而信息網絡技術的普及應用，尤其是實名制的實施，導致基於信息收集契約關係的個人信息權利義務主體的確定性特徵及其權利義務關係發生本質變化，並對個人信息權利保護原則提出新的挑戰。經過對實名制環境下個人信息權的考察，我們應當重新構架新的個人信息保護原則。具體而言，實名制環境下的個人信息保護原則應當包括個人信息自決原則、信息收集處理合法原則、信息收集處理規則公開原則、信息收集處理雙方地位平等原則、個人信息收集數量最小化原則、個人信息收集和利用有限原則、個人信息安全管理原則以及信息控制者的救濟責任原則等八大基本原則。

Traditionally, the principles of how to protect personal information are established on the premise that information subject is certain and obligation subject, namely information control subject is uncertain. However, the popularization and application of information and network technology, especially the implementation of the real-name cyberspace, both of them are certain, which make key elements of principles in right protection undergo major transformation. And it put forward the new challenge to the principles of personal information right protection. In this case, it’s necessary to rebuild principles in personal information protection. It’s mentioned that the new principles should include 8 basic principles which are as follows: personal information self-determination, legalization on collecting and processing information, open rules in collecting and processing information, equal status between both sides of information collecting and processing, minimization of information quantity, limited collecting and using of personal information, security of personal information management, and responsibility of information administrator.