个人信息权的体系化解释——兼论《个人信息保护法》的公法属性

《个人信息保护法》是数字时代个人信息保护的基本法。它采取了将个人信息权作为新兴公法权利的思路,确立了完整的个人信息权利保护体系,在个人信息保护问题上和《民法典》一起形成了公私法共同协力的进路。《个人信息保护法》以权利束的方式规定了个人信息主体的知情权、决定权、查阅权、复制权、更正权、删除权、可携带权和信息权利救济权等。《个人信息保护法》从立法依据、权利体系、条文设计和规制措施上都体现出鲜明的公法属性,这也可以从基本权利的双重面向和个人信息国家保护义务得到理论上的证成。这部法律是数字时代公法秩序的基石,它对公法边界的形塑仍需通过其实施来确立。

Systematic Interpretation of the Right to Personal Information-Also on the Public Law Attribute of the Personal Information Protection Law

The development of information technology not only promotes the development of social productive forces, but also profoundly changes the relations of production. Due to the wide application of information technology and its profound impact on production and life in the era of big data, we need to build a legal framework for personal information protection from the dual perspectives of constitutional law and civil rights, so that the development of technology can be guided by human dignity and the value of human autonomy. The Personal Information Protection Law is the basic law on the protection of personal information in China in the digital age. The human rights clauses in the constitution are the theoretical cornerstone of the right to personal information as a right in public law, and human dignity is the normative basis of the right to personal information as a positive right. The Personal Information Protection Law adopts the proposition that the right to personal information, as a new right in public law, establishes a complete legal protection system. In China, Personal Information Protection Law and Civil Code form a public-private law hybrid approach to personal information protection. The right to personal information further enriches the connotation of freedom and privacy of communication. Among the bundle of personal information right established by this law, the right to informed consent is the foundation, the right to access is the core, the right to portability is the guarantee of personal information self-determination, and the right to deletion embodies the integrity of digital personality. The adoption of the law transforms the right to personal information from a right ought to be to an actual right. In the relationship between the Civil Code and the Personal Information Protection Law, the construction of the right to personal information and the remedies for its infringement should take the Personal Information Protection Law as their starting point. The personal information right established by this law transcends the right in the private law sense or legal interests in criminal law. It is an emerging public law right with a constitutional normative basis, aimed at guiding the development of technology by the value of human dignity. The Personal Information Protection Law embodies the distinctive public law attribute in terms of legislative basis, rights system, and article design. This can also be theoretically explained from the dual perspectives of a fundamental right and the state’s obligation to protect personal information. As the cornerstone of the public law order in the digital age, its function of shaping of the boundaries of public law still needs to be established through its implementation. The Personal Information Protection Law has established an extensive and comprehensive system of rights, and the structure of various specific rights, the way of their exercise, the obligations of information controllers and processors, the liabilities for failing to fulfill their obligations, and the causes of relevant actions still need to be clarified by law enforcement agencies and judicial departments through legislative interpretation or judicial cases.