摘要
在大数据时代,知情同意机制已无法有效应对大数据生态系统的多元性和复杂性,无需取得数据主体同意的合法利益豁免可成为大数据信息使用的另一重要合法依据,为大数据产业发展提供灵活空间。我国在个人信息保护的相关立法中可引入合法利益豁免机制。引入该机制时,对合法利益应采用广泛的定义,只要是未违法的使用利益均属合法利益。但数据控制者必须进行一个平衡测试,证明数据使用的合法利益高于数据主体的个人利益,方可适用合法利益豁免。平衡测试可采用个案分析方式,并遵循必要性原则、目的限定原则和比例原则。此外,数据控制者还应对平衡测试进行全程记录,以接受数据主体、政府数据保护部门和法院的监督。
In the big data era, the notice and consent mechanism is unable to effectively deal with the diversity and complexity of the big data ecosystem,and legitimate interests exemption which does not require the consent of the data subjects can be an important alternative legal basis for big data information processing,and provide big data industry flexible development space. China may introduce legitimate interests exemption mechanism in the relevant legislation on personal information protection. When introducing this mechanism,a broad definition of legitimate interests should be adopted,as long as it is a non - illegal use of interests, it belongs to legitimate interests. However, the data controller must conduct a balance test to prove that the legitimate interests of data use override the personal interests of the data subject, in order to apply legitimate interests exemption. The balance test can be carried in a case - by - case way and should follow the principles of necessity, purpose limitation,and proportionality. In addition,data controllers should document the balance test, in order to be monitored by data subjects,government data protection authorities,and courts.
出处
《政法论坛》
CSSCI
北大核心
2019年第1期74-84,共11页
Tribune of Political Science and Law
基金
国家社科基金青年项目"大数据时代个人信息保护的‘场景风险监管’模式研究"(17CFX069)的阶段性成果
关键词
大数据时代
个人信息保护
合法依据
知情同意机制
合法利益豁免
Big Data Era
Personal Data Protection
Legal Basis
Notice and Consent Mechanism
Legitimate Interests Exemption
作者简介
谢琳,法学博士,中山大学法学院讲师、硕士生导师。
