個人信息保護的“公私并行”路徑:我國法律實踐及歐美啟示

Combined Approach of Public Law and Private Law in Protecting Personal Information: China’s Practice and Lessons from EU and the U.S.

以制定中的《個人信息保護法》和新近生效的《民法典》為代表，我國個人信息保護的實踐已經發展出公法和私法并行的路徑，但是在公法路徑的法理依據、私法路徑的適用范圍以及公私各路徑制度完善等方面仍存在諸多探討空間。為全面剖析和優化我國個人信息保護的公私并行模式，借鑒歐美個人信息保護制度的經驗做法，本文以憲法基本權利作為最終依據以理順個人信息公法保護的法理邏輯;按個人信息的私密性與侵害行為的后果構建四分法以厘清個人信息私法保護的適用范圍;并從設立獨立個人信息保護機構和完善具體執法運作機制兩個方面，以及擴大損害事實認定和改進代表人訴訟機制兩個角度，分別針對公私保護路徑的優化進行了討論并提出建議。

"Represented by the Personal Information Protection Law in its drafting process and the newly effective Civil Code,a combined approach of public law and private law has been developed in Chinas’practice of protecting personal information.Yet there is still vast room for discussion in terms of laying solid legal basis of public law approach,delimitating the applicable scope for private law approach,and improving the institutional settings for both public and private law approach.In order to comprehensively analyze and optimize the combined approach of personal information protection in China,based on lessons from the institutional experience and practice of personal information protection in EU and the U.S.,this article suggests to pin down a constitutional right as the ultimate legal basis to rationalize the logic of public law protection of personal information; and to construct a quartering method based on the privacy of personal information and the consequences of infringement,so as to clarify the applicable scope of private law protection of personal information.As optimizing suggestions for public and private protection approaches respectively,this article carries out further discussions on setting up an independent personal information protection agency and perfecting the specific law enforcement mechanism,as well as expanding the explanation in the determination of damage and improving the representative litigation mechanism."