公共数据授权运营中个人信息保护研究

Research on Personal Information Protection in the Authorized Operation of Public Data

摘要: 在数字时代法治政府建设背景下，公共数据授权运营是公共数据开放的一种重要实现方式。目前我国已将公共数据授权运营从业务模式推进到了制度建设实践阶段，但随之出现了数据收集规则不清晰、数据存储存在安全漏洞和数据利用规制不足等个人信息保护隐患。运营中个人信息保护还面临行政机关监管不足、公民知情同意权规则适用、公民的权利行使与救济渠道存在问题的困境。公共数据授权运营中个人信息保护的应然逻辑是公益与私益的有机协调、权利义务责任的统一及法律与技术的融合。同时，为实现公共数据授权中个人信息的有效保护，我们应当在个人信息主体权利救济机制、公共数据授权运营行政法规和技术标准体系等方面构建和完善公共数据授权运营中的个人信息保护制度。

Abstract: In the context of building a law-based government in the digital age, the authorized operation of public data is an important means of opening public data. At present, China has advanced the authorized operation of public data from a business model to the stage of institutional construction and practice. However, hidden risks to personal information protection have emerged, such as unclear data collection rules, security vulnerabilities in data storage, and insufficient regulation of data utilization. In its operation, personal information protection also faces dilemmas including inadequate supervision by administrative organs, difficulties in applying the rules on citizens’ right to informed consent, and problems in citizens’ exercise of rights and relief channels. The normative logic of personal information protection in the authorized operation of public data is the organic coordination of public and private interests, the unity of rights, obligations, and responsibilities, and the integration of law and technology. At the same time, in order to achieve effective protection of personal information in the authorized operation of public data, we should construct and improve the personal information protection system in the authorized operation of public data in such aspects as the rights relief mechanism for personal information subjects and the system of administrative regulations and technical standards for the authorized operation of public data.