我国个人信息匿名化的法律标准与规则重塑

大数据时代,匿名化规范既是个人信息保护中风险预防的手段,也是我国数据经济发展中数字流通的法律基础,但匿名化的法律标准在我国法律中还有待明确。欧盟已通过《一般数据保护条例》提出明确的匿名化标准,但该条例基于流程设置的标准适用于欧盟境内尚可,适用于我国或显得过于严苛,有碍数字经济的发展。我国个人信息匿名化法律标准与规则的重塑应当考虑环境、再识别风险,建议进行功能性匿名化。将比例原则应用到我国匿名化法律标准和规则的重塑之中,并将其引入到评估匿名信息接收者的风险等级,有助于降低个人信息被再识别的风险亦有利于匿名化的法律标准制定和规则构建。

Reconstruction of Legal Standards and Rules on the Personal Informationan Anonymization in China

In the era of big data,the standard of anonymization is not only the means of risk prevention in the protection of personal information,but also the legal basis of digital circulation in the development of China’s data economy.The EU has proposed a clear anonymization standard through General Data Protection Regulations,but the standard is based on process-setting standards,apply fairly well in the EU,but may be too strict in China,hampering the development of the digital economy.The remolding of legal standards and rules of anonymity of personal information in China should consider the environment and reidentification risk and suggest functional anonymity.Applying the principle of proportion to the remolding of anonymous legal standards and rules in China and introducing it to the assessment of the risk level of anonymous information recipients can reduce the risk of personal information being re-identified,and is also conducive to the formulation of anonymous legal standards and rules.