【摘要】 国家统一法律职业资格考试、注册会计师考试等职业资格考试已全面采用计算机化考试模式。在提升考务效率与防作弊能力的同时，机考系统对人脸识别、行为轨迹等考生敏感个人信息进行深度采集，容易引发公共利益与个人隐私保护之间的矛盾。本文以计算机化职业资格考试为切入点，剖析了机考中存在的敏感个人信息采集范围过宽、“告知—同意”规则流于形式、受托方平台法律地位模糊、数据销毁路径不畅等现实问题。基于此，本文引入信息处理生命周期治理视角，尝试构建了三维协同治理路径，以期为机考数据治理提供理论支撑。更多还原

【Abstract】 Professional qualification examinations, such as the National Unified Legal Professional Qualification Examination and the Certified Public Accountant Examination, have fully adopted the computer-based testing(CBT)mode. While this shift has enhanced the efficiency of examination administration and anti-cheating capabilities, CBT systems extensively collect examinees’ sensitive personal information, such as facial recognition data and behavioral data, thereby triggering a tension between public interests and personal privacy protection. This paper takes computer-based professional qualification examinations as a focal case study to examine persistent challenges in CBT practices, including: 1)the excessive and disproportionate collection of sensitive personal information; 2)the procedural formalism undermining the substantive effectiveness of the notice-and-consent framework; 3)the ambiguous legal accountability for third-party examination platforms acting under administrative delegation; and 4)the absence of clear, enforceable mechanisms for post-examination data erasure. Drawing on the information processing lifecycle governance,this paper proposes a three-dimensional collaborative governance framework, aiming to provide theoretical support for CBT data governance.更多还原