治理研究 ›› 2023, Vol. 39 ›› Issue (3): 143-157.

• 法与治理 • 上一篇    

平台控制下个人信息数据的权利配置:对第三方原则的双重反思

林海伟   

  • 收稿日期:2022-10-31 出版日期:2023-05-15 发布日期:2023-06-05
  • 作者简介:林海伟,中国政法大学刑事司法学院博士后,新疆政法学院反恐维稳法治化研究院负责人。
  • 基金资助:
    中国博士后科学基金面上资助课题(2022M713493)

Constitutional Right to Personal Information under Platform Control: Double Reflection on the Third-Party Doctrine

Lin Haiwei   

  • Received:2022-10-31 Published:2023-05-15 Online:2023-06-05

摘要:

在侦查场景中,平台控制下个人信息数据的权利配置关系到相关信息能否获得保护、相应的取证手段是否属于强制性措施而受到规制,美国判例中呈现的第三方原则提供了一个解读的视角。该原则的理论基点主要包括公民对向第三人传递信息的行为自担风险,公民对存储在第三方的数据不具有主张合理隐私期待的权利基础等。然而,第三方原则已然无法适用于平台控制下的个人信息,原因在于信息主体与个人信息之间的联结在信息流动过程中并未被斩断。加之对第三方原则的全景式、本土化反思,可得到平台控制下个人信息数据权利配置的基本构造:一方面,以信息主体之于个人信息的人格权为内核,涉及隐私权、个人信息利益、通信秘密等权利基础;另一方面,对于平台而言,相关数据调取措施所造成的干预集中于平台的经营自由权,包括个人信息保护义务的克减与协助数据调取义务的课予,平台借此得以与执法机关积极博弈,构成个人信息保护的外核。

关键词: 第三方原则, 平台, 信息控制者, 个人信息保护, 多边强制性措施

Abstract:

From the perspective of investigation, the constitutional right of personal information controlled by the platforms is related to whether the relevant information should be protected and whether the corresponding means of obtaining evidence are compulsory measures. The third-party doctrine as presented in American jurisprudence provides a perspective for interpretation. The theoretical bases of this principle include that citizens do not have a rights basis to claim privacy expectations for information stored by a third party and bear the risk of transmitting information to that third party. However, the third-party doctrine has not been applied to personal information under the control of the platforms, as the connection between the information subject and the personal information has not been cut off in the process of information flow. Combined with the panoramic and localized reflection on the third-party principle, the basic structure of the constitutional right of personal information under the control of the platforms can be obtained. The personal right of the information subject to their personal information should be the core, which involves the rights based on privacy, personal information interests, communication of secrets, and other rights. For the platforms, the intervention caused by relevant data retrieval measures focuses on the platforms' operational freedom, including the derogation of personal information protection obligations and the provision of assistance in data retrieval obligations. This allows the platforms to actively resist the requests of law enforcement agencies, constituting the outer core of personal information protection.

Key words: Third-Party doctrine, the Platform, information controller, protection of personal Information, multipolar compulsory measures

中图分类号: