论数字时代下个人信息禁止滥用原则

On the Principle of Prohibiting of Misuse of Personal Information in the Data Era

摘要: 在数字时代，信息主体因缺乏对信息的控制，而难以具有信息分享自由的空间。同时基于信息共享的要求，知情同意原则已无法实现信息利用与保护的平衡。故有必要引入禁止滥用原则，采取事后救济的方式，以消解信息分享与自决的矛盾冲突。禁止滥用原则来源于信息信义义务理论，我国《个人信息保护法》规定的诚信原则可以为其提供法律依据，具备理论自洽性；同时国外立法实践、我国立法及其司法实践的倾向为引入禁止滥用原则提供可行性。在适用上，对于敏感信息与一般信息采取不同强度的标准以界定信息滥用行为；赋予信息主体在个人信息受有损害或可能有损害之时，行使删除的权利。

Abstract: In the data era, it is difficult for information subjects to have the space for freedom of information sharing due to the lack of control over information. At the same time, based on the requirements of information sharing, the principle of informed consent is no longer able to achieve a balance between information utilization and protection. Therefore, it is necessary to introduce the principle of prohibition of misuse and adopt the way of post-facto relief in order to eliminate the contradictory conflict between information sharing and self-determination. The principle of prohibition of misuse originates from the theory of information fiduciary duty, and the principle of good faith stipulated in China’s Personal Information Protection Law can provide a legal basis for it, with theoretical self-consistency; at the same time, foreign legislative practice, China’s legislation and its tendency to judicial practice provide feasibility for the introduction of the principle of prohibition of misuse. In terms of application, standards of different intensity are adopted for sensitive information and general information to define information abuse; and the subject of information is given the right to delete personal information when it is damaged or likely to be damaged.