英文摘要 |
One core topic in this digital age is how to balance between protection and utilization of personal information. The Personal Information Protection Law adds the principle of good faith to the principle of legality, legitimacy and necessity, creating a balanced path based on good faith. This path effectively integrates the “ context-based approach” to make up for the shortcomings of the “proportionality-based approach”and“risk-based approach”, and solves the digital trust deficit. The principle of good faith can be categorized into the following three sub-mechanisms. First, “good faith mechanism to supplement the obligations of controllers” imposes a general obligation on controllers not to defraud, manipulate and treat individuals fairly. Second, “good faith mechanism to limit the rights of information subjects” prohibits individuals from abusing their rights in information processing activities to the detriment of rights of others. Third, “integrity mechanism to balance the interests of information subjects and processors” requires state organs to assume the fiduciary duty of faithfulness and diligence, and introduces a legitimate interest clause to reconcile the conflicting interests of private controllers and individuals. As a carte blanche of appointment granting discretion, the principle of good faith requires that law enforcers and judicial personnel should also uphold good faith, balance between personal information protection and utilization as the purpose, properly interpret legal rules, fill legal loopholes, and finally implement the flexible rule of law order for personal information protection based on the rules-principle model. |