英文摘要 |
Notice and consent framework based on privacy policy is the core system of personal information protection, but its nature and effectiveness should be reconsidered. Notice and consent framework has multiple characteristics in different countries and regions, such as contracts, statements, and compliance with fundamental rights. In China, it should also be regarded as a multi-dimensional institutional tool. From the perspective of individual autonomy, notice and consent framework faces problems such as information overload and too much decision-making. Even if the system is improved, it can not achieve individual full informed consent. However, the reader of privacy policy not only includes individuals in realtime interaction scenarios, but also internal personnel of enterprises, market raters, law enforcement and judicial personnel and individuals in non interaction scenarios. Privacy policy may serve as the compliance charter of information processors, the information media of market reputation mechanism, the implementation basis of judicial proceedings and administrative law enforcement, the tool to win individual trust and privacy education. We should decouple notice from consent, relax the consent requirements moderately, but strengthen the notification requirements of privacy policy. The privacy policy can adopt different reminder methods and hierarchical structures externally, become the compliance guidance embedded in different departments and products, and adopt risk-based modular disclosure in form. |