| 摘要: |
| 伴随数字技术迭代发展和深度应用，数据与人工智能正驱动着社会不断变革，如何在充分保障各方权益的前提下，释放数据要素价值，已成为各国个人数据治理制度面临的核心难题。数据资源化（要素化）利用要求数据实现社会化重用，即数据具备可获取性且使用者享有使用方式的决定权。然而，以个人决定为基础的现行个人数据治理制度，与数据资源化利用的现实需求之间存在结构性张力。为此，各国正积极探索适应时代需要的制度变革路径。其中，美国持续完善“负责任数据治理”体制，欧洲则通过修法扩张“合法利益”的适用范围并适度放松合规监管，以回应个人数据资源化带来的制度挑战。在制度重构探索中，社会契约理论被引入个人数据治理领域，为重新审视个人与社会在个人数据治理中的权利配置与制度安排提供了新的理论视角。具体而言，应当以社会许可机制为基础重构合法性基础体系，并对信息主体与处理者之间的权利义务关系作出相应调整。这一转向将有助于个人信息保护法摆脱“权利法”的路径依赖，实现向“行为法”的彻底转型，从而破解个人保护与资源利用的制度冲突，实现信息主体权益保护与促进数据社会化重用的双重目标。 |
| 关键词: 个人数据 个人数据治理 个人决定 社会契约理论 社会许可 |
| DOI： |
| 分类号: |
| 基金项目: |
|
| The Institutional Transformation of Personal Data Governance: From Personal Decision making to Social License |
|
Gao Fuping
|
|
|
| Abstract: |
| With the iterative development and deep application of digital technology, “data+AI” has been driving continuous social change. How to unleash the value of data while fully protecting the rights and interests of all parties has become a hard nut to crack in various countries. The utilization of data resources (or as a factor of production) requires the social reuse of data, which means that data is available and users have the right to decide how to use it. However, there is a structural tension between the current personal data governance system based on individual decisions and the practical need for data resource utilization. Therefore, European countries and the United States are actively exploring institutional reform that meets the needs of the times. Among them, the United States continues to improve its “responsible data governance” system, while Europe expands the scope of “legitimate interests” through law amendments and moderately relaxes compliance supervision to respond to the institutional challenges brought about by the resource utilization of personal data. In the exploration of institutional restructuring, social contract theory has been introduced into the field of personal data governance, providing a new theoretical perspective for re-examining the allocation of rights and institutional arrangements between individuals and society in personal data governance. Specifically, the lawful basis (legitimacy foundation) should be reconstructed based on the social license mechanism, and corresponding adjustments should be made to the rights and obligations between data subjects and data users. These changes will help the Personal Information Protection Law to transform from the “entitlement law” to “action governing law”, thereby resolving the institutional conflict between personal protection and resource utilization, and achieving the dual goals of protecting the rights of data subjects and promoting the social reuse of data. |
| Key words: Personal Data, Personal Data Governance, Personal Decision-making, Social Contract Theory, Social License |
