以用户“知情–同意”原则为中心探析自动驾驶企业数据合规义务边界

Exploring the Boundaries of Data Compliance Obligations for Autonomous Driving Companies Centered on the Principle of User Informed Consent

摘要: 本文旨在探讨自动驾驶企业在数据合规义务中，尤其是围绕用户“知情–同意”原则所产生的边界模糊问题。自动驾驶汽车在运行中收集海量数据，其复杂性使得传统的“知情–同意”框架在适用上陷入困境，包括个人信息边界模糊、同意有效性不足以及数据主体多元性带来的挑战。本文通过剖析这些困境的法理本质，论证在自动驾驶数据治理中引入管制规则以弥补单一财产规则或责任规则不足的必要性。在此基础上，本文将提出基于数据分类的合规边界划分思路，并为构建一个平衡数据安全、产业发展与个人权利保障的合规体系提出具体建议。

Abstract: This article aims to explore the blurred boundary issues that arise for autonomous driving companies in their data compliance obligations, particularly concerning the “user informed-consent” principle. Autonomous vehicles collect massive amounts of data during operation, and their complexity makes the traditional “informed-consent” framework difficult to apply, including challenges such as unclear personal information boundaries, insufficient consent validity, and the diversity of data subjects. By analyzing the legal nature of these dilemmas, this article argues for the necessity of introducing regulatory rules in autonomous driving data governance to compensate for the inadequacies of relying solely on property rules or liability rules. On this basis, the article proposes a compliance boundary division approach based on data classification and offers specific recommendations for building a compliance system that balances data security, industrial development, and individual rights protection.