| 英文摘要 |
The confirmation of data rights is the foundation of the market-oriented reform of data as a production factor. When the law allocates data property rights to data processors in situations involving identifiable personal data, a symbiotic rights structure emerges in which data property rights and personal information rights coexist. At present, however, the boundary between the two remains unclear. The personal information protection system—centered on“informed consent”and characterized by“full-lifecycle control”—has become an institutional constraint on the exercise of data property rights, thereby hindering the efficient circulation of data and the further development of the digital economy. In essence, personal information rights are defensive rights designed to prevent risks arising from data processing, not exclusive rights of control over data by individuals. The personal information rights framework should thus evolve from one of comprehensive control to one based on“residual control plus risk prevention.”This entails narrowing the scope of instrumental rights such as the right to data portability, strengthening behavioral regulation and tiered governance, and reconstructing a more adaptive model of protection. It also requires a clear differentiation between the two types of rights attributes, a rational coordination between individual and public interests, and a precise delineation of what categories of data may be subject to market transactions. Furthermore, the foundational value of digital labor—the contribution of data subjects to the generation of data—should be recognized. In accordance with the principle of distributive justice, a data revenue allocation mechanism should be established based on the degree of contribution, to ensure a fair sharing of both data value and its returns. Ultimately, this will give rise to a new governance framework for data that balances protection, circulation, and innovation. |