摘要
个人自行公开与被他人合法公开其个人信息,二者存在本质差异。我国个人信息保护法第27条的“不作区分,统一规则”与毫无限制的拒绝权之立场值得商榷。自行公开个人信息,意味着向不特定人作出了同意处理的意思表示。应从客观的信息处理者角度,对同意有效性及其具体内容作出解释。事先拒绝应当理解为明确框定同意的范围,是否有效依意思表示解释规则为断;事后拒绝权不能被理解为任意撤回权;后续处理处于同意范围内的,信息主体无事后拒绝权。他人合法公开个人信息,意味着该信息处理行为属于合理使用情形;若后续处理行为因目的兼容而与他人合法公开属于同一类型的合理使用,则信息主体无权拒绝。
There exists a fundamental difference between an individual's voluntary disclosure of their personal information and the lawful disclosure of personal information by others.The approach taken by the Article 27 of the Personal Information Protection Law,which adopts a unified rule without differentiation,and the unbounded right to refuse,demands careful consideration.When an individual voluntarily discloses their personal information,it signifies their consent for processing to unspecified information processors.The validity of the consent and its specific content should be interpreted from the perspective of an objective potential processor:the preemptive refusal should be understood as a means of clearly delineating the scope of the consent,and its validity should be determined by the rules governing the interpretation of expression of intent.It is crucial to note that the right to refuse after the fact should not be misconstrued as an arbitrary right of revocation.If subsequent processing falls within the scope of the initially given consent,the data subject relinquishes the right to refuse any further actions.In the case of lawful disclosure of personal information by others,it means that the information processing activity is deemed reasonable and falls within the realm of legitimate use.The legality of subsequent processing de-pends on whether the disclosure to third parties aligns with the same type of reasonable use due to com-patibility of purposes.If it indeed falls under the same type of reasonable use,the information subject is not entitled to refusing such actions.
出处
《比较法研究》
北大核心
2023年第6期154-169,共16页
Journal of Comparative Law
基金
国家社科基金一般项目“企业间数据竞争法律问题研究”(项目编号:20BFX121)的阶段性研究成果。
关键词
自行公开
他人合法公开
同意
目的兼容
self-disclosure
legitimate disclosure by others
consent
compatible purpose
