民法典視角下個人信息的侵權法保護──以事實不確定性及其解決為中心

Protection of Personal informationin Tort Law from the Perspective of Civil Code: Focus on Factual Uncertainty and its Resolution

大數據時代個人信息的收集與處理造成了自然人與信息控制者之間明顯的信息不對稱，從而使得在侵害個人信息的民事糾紛中，自然人無法證明泄露其個人信息的信息控制者是誰，以至于受害人難以獲得救濟。為此，司法實踐多採取轉換證明責任、降低證明標準等方法。然而，這些方法均無法為上述問題提供妥善合理的解決方案。一個合理的解決路徑是，重新闡釋《民法典》第1170條所規定的共同危險行為的理論基礎，不再強調多個被告實施行為的危險性，而是側重于這些行為客觀上造成的證據損害現象。唯此，方能在受害人無法準確證明哪個信息控制者泄露了個人信息的案件中，通過類推適用共同危險行為制度，為受害人提供充分救濟。未來我國的個人信息保護法應當對此作出相應規定。

The collection and processing of personal data in the era of big data has caused obvious information asymmetry between individuals and information controllers, so that individuals in civil actions could not obtain compensations due to the uncertainty of causation and other elements. To this end, some courts adopt methods such as conversion of responsibility of proof or reduction of proof standards. However, none of these methods can provide a reasonable solution to the above problems. A reasonable solution path is to reinterpret the theoretical basis of alternative liabilities, to focus on the evidence damage caused by these behaviors. in this way could cases of data breaches, in which the fact of leakages, causation and fault is uncertain, be resolved by analogy applying the alternative liabilities. in the future, China's personal information protection law should make corresponding provisions.