个人信息保护的行政规制路径

The Administrative Regulation Path of Personal Information Protection

摘要: 公民个人信息保护一直以来都是通过相关法律救济和行政规制两种途径。法律救济以侵权为前提，注重事后惩戒与恢复受害者合法权益，但在大数据时代下，由于个人信息权利主体与处理主体地位不平衡，导致权利主体维权难度高、举证困难，并且损害往往不以传统侵害方式显现。行政规制以国家公权力为保障，通过专业性、强制性的规定，在治理效率、事前预防具有比较优势。因此，对于个人信息保护可以加强行政规制，通过制定行政标准在事前予以预防，同时对于行政机关可能存在的侵犯个人信息现象，通过行政复议、行政诉讼以及行政赔偿，保障公民的权利免受非法侵犯。

Abstract: The protection of personal information of citizens has always been a part of legal remedies and administrative legislation. Legal remedies are based on infringement, with a focus on punishing and restoring the legitimate rights and interests of victims afterwards. However, in the era of big data, due to the imbalance between the status of the subject of personal information rights and the status of the processing subject, it is difficult to protect the rights of legal subjects and provide evidence. In traditional infringement methods, the damage is often invisible. Administrative management protected by public power has comparative advantages in effective management and prevention through professional and mandatory supervision. In this way, it is possible to strengthen administrative management of personal data protection, prevent infringement of personal data by formulating administrative standards, and protect citizens’ rights from illegal infringement through administrative reconsideration, administrative litigation and compensation for infringement of personal data by administrative agencies.