摘要
根据《个人信息保护法》第72条第1款及第20条的相关规定,尽管用户在一定程度上对信息处理拥有自决权,存在可以访问数据的开放型制造商和用户共同作为个人信息处理者的可能性,但这种自决不应被视为对个人信息的真正控制。数据开放型制造商无法避开其作为个人信息处理者的法律责任。而封闭型制造商虽然无法直接访问数据,却能够通过其设备中的人工智能程序实质影响处理方式和目的,因此不应将其排除在个人信息处理者的范畴之外。明确封闭型制造商的处理者责任,有助于减少数据泄露的外部性,促使其采取更有效的安全措施,从而填补现有体系中对数据处理责任界定的漏洞,减少责任追究中的混乱与不确定性。
The intervention of technologies such as artificial intelligence and the Internet of Things has increasingly blurred the boundaries of subject liability for personal information processing behaviour.According to the relevant provisions of Article 72(1)and Article 20 of the Personal Information Protection Act,although users have a certain degree of self-determination over the processing of information,and there exists the possibility that an open manufacturer with access to data and the user may jointly act as a processor of personal information,such self-determination shall not be regarded as genuine control over personal information.Open manufacturers of data cannot avoid their legal responsibility as processors of personal information.Closed manufacturers,on the other hand,although they do not have direct access to the data,are able to materially influence the manner and purpose of the processing through artificial intelligence programs in their devices and should therefore not be excluded from the category of personal information processors.Clarifying the liability of closed manufacturers as processors will help to reduce the externality of data leakage and prompt them to adopt more effective security measures,thereby flling the loopholes in the definition of liability for data processing in the existing system and reducing confusion and uncertainty in the pursuit of liability.
作者
李西泠
Li Xiling(the Law School of Hunan Normal University)
出处
《国家检察官学院学报》
北大核心
2025年第3期87-102,共16页
Journal of National Prosecutors College
基金
2024年度司法部法治建设与法学理论研究部级科研项目“个人数据权益的保护与行使机制研究”(24SFB1005)的阶段性成果。
关键词
人工智能
个人信息处理者
共同处理
处理目的
Artificial Intelligence
Personal Data Processor
Joint Processing
Processing Purpose
作者简介
李西泠,湖南师范大学法学院讲师、法学博士。
