《个人信息保护法》知情同意规则的适用

Application of Informed Consent Rules of the Personal Information Protection Act

摘要: 科技的发展使得知情同意规则面临虚置的风险，如何进一步完善知情同意规则是亟需解决的难题。对于个人信息的保护需要转换思路进行动态化的保护，场景规则是一种动态化的分析框架，即在不同的场景对个人信息的处理行为进行风险评估并划分等级，是动态地保护个人信息的方式，最大程度地兼顾信息用户和个人信息处理者的利益；在涉及公共利益时，把比例原则作为补充性规定减少利益冲突。知情同意规则重在保护用户的信息自决权，对于隐私协议需要求个人信息处理者增加对风险程度的告知义务，使用户提前知悉相应个人信息处理行为的潜在风险，完善用户行使信息自决权的基础。当个人信息处理者对个人信息进行处理活动或与第三方主体数据共享时，通过引入追踪反馈制度，即个人信息处理者需要及时记录用户个人信息的流转情况，并将所追踪到的个人信息流转情况向用户反馈，保证用户能充分知情。

Abstract: With the development of science and technology, informed consent rules have suffered a great impact. How to further improve the informed consent rules is an urgent problem to be solved. Dynamic to the protection of personal information need to transform ideas for protection, setting rules is a kind of dynamic analytical framework, namely in different scenarios for the processing of personal information and rank of risk assessment, is a dynamic way of protection of personal information, the greatest degree of information users and the interests of the personal information processing; when the public interest is involved, the principle of proportionality should be used as a supplementary provision to reduce conflicts of interest. Informed consent rules focus on protecting users’ right to information self-determination. Privacy agreements require personal information processors to increase the obligation to inform users of the degree of risk, so that users can be informed of the potential risks of relevant personal information processing in advance and improve the basis for users to exercise their right to information self-determination. When the personal information processor conducts processing activities on personal information or shares data with the third party, the tracking feedback system shall be introduced, that is, the personal information processor shall rec-ord the flow of the user’s personal information in time and report the traced flow of personal information to the user to ensure that the user can be fully informed.