法学研究

文章摘要

个人数据交易的双重法律构造

The Dual Legal Structure of Personal Data Transactions

DOI：

英文关键词: data factor|data transaction|personal information protection|informed consent

基金项目:

作者	单位
林洹民

摘要点击次数: 1288

全文下载次数: 83

中文摘要:

个人数据交易具有动态性与非排他性,数据交易当事人处于持续性数据收集或传输关系之中,任何一方均不能排他地控制个人数据。上述特性使得数据交易不能被界定为数据买卖,数据处理也不能被简单地理解为数据合同的履行行为。合同关系与数据处理关系的不同,使得数据交易具备双重法律结构。一次完整的个人数据交易同时包含表意人的承诺与个人的同意,前者属于意思表示,后者则属于准法律行为。与之相应,个人数据交易由基础性合同与个人信息处理活动组成,前者主要受合同规则调整,后者则是个人信息保护法的规范对象,二者效力应分别判断。在规范适用上,个人信息主体的同意并非原则上得准用法律行为规则。合同规则与个人信息处理规则各守其分,分别规范数据交易中的不同行为,二者之间不存在冲突。考虑到数据处理也是合同项下的行为,合同规则与个人信息保护规则可以在例外情况下穿透双重结构,协力实现数据流动与个人信息保护之间的动态平衡。

英文摘要:

Personal data transactions are dynamic and non-exclusive in nature because of the facts that parties to the data transactions are in a continuous data collection or transfer relationship after contracting and neither of them has exclusive control over personal data. These characteristics of data transactions make it illogical to consider data transactions as some kind of sale relationship, and data processing cannot be simply understood as the performance of the contract. The difference between the contractual relationship and the data collection or transfer relationship leads to the dual legal structure of data transactions. A complete single personal data transaction contains the promise as a contractual act and the consent as the legal basis for data processing, and the former is the declaration of intent and the latter is a quasi-legal act. Correspondingly, a whole transaction should also be observed on the basis of the composition of contractual relationship and data processing relationship. The former is mainly adjusted by rules of the Civil Code, while the latter is the normative object of the Personal Information Protection Law. The consent of personal information subject is, in principle, not subject to the rules of legal conduct. Therefore, contractual rules and personal information processing rules separately regulate different parts of personal data transactions and there is no conflict between them. Considering that personal information processing is also a contract performance, contractual rules and personal information protection rules can by exception penetrate the dual legal structure of data transactions to achieve a dynamic balance between encouraging data flow and protecting personal information.

查看全文下载PDF阅读器

关闭