企业数据中个人信息的合规利用

Compliant Utilization of Personal Information in Enterprise Data

摘要: 随着数字技术的广泛应用，作为信息载体的数据逐渐成为一种新型生产要素。由于数据本身的强流动性，构建数据合规利用规则时传统的财产权利配置模式难以套用，在企业数据包含个人信息的情形下，需要区分企业数据之上的个人信息权和企业的财产性权利并实现二者的兼顾。因此，应当在企业数据赋权和个人信息和数据权益论证的基础上，从框架到体系、原则到具体路径的方式，提出体现企业数据特殊性的确权模式、加强全流程管控和形成数据共享模式，在合理保护个人信息的基础上发挥企业数据的最大价值。

Abstract: With the widespread application of digital technologies, data, as an information carrier, has gradually emerged as a new type of production factor. Due to the strong mobility of data itself, traditional property right allocation models are difficult to apply when constructing rules for the compliant utilization of data. In situations where enterprise data contains personal information, it is necessary to distinguish between personal information rights over enterprise data and the property rights of enterprises, and to achieve a balance between the two. Therefore, based on the empowerment of enterprise data and the justification of personal information and data rights, it is proposed to establish a rights confirmation model that reflects the uniqueness of enterprise data, strengthens end-to-end control, and forms a data sharing model, in order to maximize the value of enterprise data while reasonably protecting personal information.