作　者：程啸
关键词：个人信息；个人信息保护法；关联性；识别性；匿名化
摘　要：

个人信息是个人信息保护法中最核心的概念，也是个人信息保护法律规范的适用前提。我国法律对个人信息采取了统一定义的模式。从《中华人民共和国网络安全法》（下文简称《网络安全法》）到《中华人民共和国个人信息保护法》（下文简称《个人信息保护法》），个人信息的概念经历了一个从窄到宽的发展演变过程。《个人信息保护法》第4条第1款将个人信息的判断要件分为积极要件与消极要件，前者是通过关联性与识别性去界定个人信息的概念范围，后者则将匿名化处理后的信息排除在个人信息之外。为了防止个人信息的范围过于宽泛，以至于个人信息保护法成为无所不包的法律，应明确个人信息积极要件中关联性要件与识别性要件之间为“且”的关系而非“或”的关系，以此来相应地控制个人信息的范围。认定关联性要件时，不仅应考虑信息的内容、目的和结果，还要考虑信息与个人权益是否存在一定的因果关联。在判断识别性时，应当限定识别主体的范围及所使用的手段与方式。作为消极要件的匿名化虽然并非可以绝对消除信息的可识别性，但是其对于保护个人信息权益也有重要的意义。

 

Definition of the Scope of Personal Information And Judgment of the Elements

Cheng Xiao

（Tsinghua University）

Abstract  Personal information is the core concept in the Personal Information Protection Law and serves as the prerequisite for the application of all legal norms of personal information protection. Chinese laws have adopted a unified definition model for personal information, and the scope of the concept has been gradually broadened from The Cybersecurity Law of the People's Republic of China (hereafter The Cybersecurity Law) to The Personal Information Protection Law of the People's Republic of China (hereafter The Personal Information Protection Law). Paragraph 1, Article 4 of The Personal Information Protection Law divides the elements for judging personal information into affirmative and negative ones, with the former defining the scope of personal information through relevance and identifiability, while the latter excluding anonymized information from personal information. In order to prevent the scope of personal information from being too broad and making the Personal Information Protection Law all-encompassing, it is necessary to specify that the relevance and identifiability elements for personal information are connected by "and" rather than "or", thereby keeping the scope of personal information in check accordingly. To determine relevance, it needs to consider the content, purpose, and result of the information, and whether there is a causal relationship between the information and individual rights. To assess identifiability, the scope of the identifiable subject and the methods and means to be used should be restricted. While the negative element of anonymization may not eradicate the identifiability of information, it is still significant for protecting the rights and interests of personal information.

Key words  personal information; personal information protection law; relevance; identifiability; anonymization

■ 作者简介  程啸，清华大学法学院教授，北京 100084。

[PDF]（下载数：）