個人資訊權利的反思與重塑

社會需要從隱私權保護過渡到個人資訊保護，這已是共識，但學界缺乏對個人資訊保護適用前提的研究。個人資訊權利保護的適用前提是存在持續性的資訊不平等關係，因此知情權、選擇權、訪問權、糾正權、刪除權等權利不能針對資訊能力平等的主體，也不能針對國家執法過程中產生的非持續性資訊收集與處理行為。個人資訊保護即資訊隱私保護，區別於侵權隱私保護與執法隱私保護，其制度也不是傳統部門法的簡單疊加。此外，個人資訊權利保護的法益基礎具有多元性，有的資訊權利可能對自身、他人、企業、市場與公眾都有負面影響。因此，個人資訊保護是為了實現“合理與正當的資訊實踐”，應當在具體場景的資訊關係中確定個人資訊權利的邊界。

It has become a consensus that modern society needs to transition from the protection of privacy right to the protection of personal information. However, there is a lack of research on the premise of personal information protection. The premise of the application of the personal information protection system is the asymmetric information relationship. Therefore, the right to informed consent, the right to access, the right to correction, the right to delete and other personal information rights cannot be aimed at the subjects with equal information capacity, or the non-sustainable information collection and processing behaviors generated in the process of governmental law enforcement context. Personal information protection is equal to information privacy protection, but different from infringement privacy protection and law enforcement privacy protection. Its system is not a simple aggregation of traditional branches of law. Meanwhile, the purpose or legal basis of personal information protection is diverse. Some personal information rights may have negative effects on the information subjects themselves, other people, enterprises, markets and the public. Therefore, the protection of personal information protection is to realize fair information practices. The boundary of personal information rights should be determined in contextualized information relationship.