中国个人信息保护法草案若干问题

在个人信息保护法草案中,个人信息的定义应修改为"个人信息是能够单独或者与其他信息结合识别有生命的自然人的各种信息,不包括匿名化处理后的信息."并加一款体现"识别"+"关联"的立法思路的文字.个人信息处理的列名操作应该由七个变更为十一个,即收集、存储、加工、使用、交易、提供、公开、查阅、复制、更正、删除等.第六十九条匿名化定义的"无法识别"且"不能复原"与第二十四条第二款规定的"重新识别"之间存在矛盾,需要修改.

Research on the Draft of China's Personal Informa-tion Protection Law

In China's Personal Information Protection Law(Draft),the definition of personal information needs to be revised,and it should be stipulated as"personal information is any kind of information that can identify a liv-ing natural person alone or combined with other information,excluding which has been processed via the anony-mization".Furthermore,a new clause as a supplement should be added in order to reflect the legislative idea of"identification"+"relevance".The listed operation items of personal information processing should be modified from seven items to eleven items,then that will be:collection,storage,processing,using,transaction,providing,disclosure,consultation,copy,correction and erasure.There is a contradiction between Article 69 and the Clause 2 of Article 24,detailed as:the terms"impossible to identify"and"unable to be recovered"which is mentioned in the definition of anonymization in Article 69,contradicts with the term"re-identify"referred in the Clause 2 of Article 24,and this contradiction should be resolved.