【作者】 何倩；

【导师】 王建平；

【作者基本信息】 四川大学 ， 民商法学， 2021， 硕士

【摘要】 近年来,大数据技术的蓬勃发展,使我国快速进入5G和物联网时代,人们生活便利性得到提升,企业数据分析方法更为科学,社会治理决策制定更加准确。万物互联的背后,是大量信息数据的支撑,个人信息是其中浓墨重彩的一笔。数据分析,已经渗透到我们生产生活中的方方面面。但是,大数据的广泛应用同时也带来了个人信息的保护难题——网络平台与个人之间频繁的个人信息流动,以及网络平台对这些信息的处理带来的安全风险。为此,本文将网络平台与个人之间流动的这些信息定义为“个人交易信息”,结合实践分析网络平台对这些信息的处理所存在的问题,提出解决方式,以期对大数据交易背景下个人信息的保护提供一些参考。文章采用文献研究法、实证研究法、法律比较方法对大数据交易背景下个人交易信息的处理问题及《民法典》对个人交易信息保护的不足进行研究。研究内容主要是四个部分。第一部分是绪论。第二部分是对大数据交易背景下个人信息处理的概述,主要是从个人信息中引出个人交易信息的概念,并分析个人交易信息处理的内涵与法律规制。第三部分是结合实际案例与研读APP隐私政策发现个人交易信息处理存在的问题,并就发现的问题进行具体的分析以及提出解决措施。第四部分是对大数据交易背景下《民法典》对个人交易信息保护的不足进行探讨。发现民事立法中,个人交易信息保护制度存在缺陷、我国个人交易信息的保护模式尚未明晰以及《民法典》对个人交易信息保护的功能定位不清的问题。并提出相应的解决措施,分析《民法典》生效后个人交易信息不当处理的责任承担,明晰《民法典》、《个人信息保护法》、以及未来可能的《大数据法》在个人交易信息具有的人格利益与财产利益、私益与公益之间的平衡取舍。创新之处包括:第一,网络平台与个人之间流通的个人信息是最容易遭受风险的信息,提出将这部分信息界定为“个人交易信息”。第二,通过对手机APP隐私政策文本的研读并结合实践案例,发现个人交易信息的处理存在收集中的合法性标准仅有“告知同意”、匿名化处理缺乏正当性以及存在超范围共享的风险。并提出合法性标准的设计思路:摒弃“告知同意”采用“知情同意”的表述,设定收集者义务边界来解决“知情同意”的困局,并结合个人交易信息的分类和场景风险理念,对个人交易信息的收集作出目的限制。以“知情同意+目的限制”作为个人交易信息收集的合法性标准;认为信息处理者只有在履行了个人交易信息的安全保障义务、授权义务及利益分享义务的前提和基础下,其通过匿名化处理获利的行为才具有正当性;对超范围共享的风险问题,本文也创造性的结合了个人信息处理的必要原则对其进行规制。第三,在对个人交易信息的研究中,发现其具有人格利益与财产利益双重属性,还同时具有私益性与公益性,《民法典》以保护其人格利益为主,保护功能以私益性为先,个人交易信息具有的财产利益及公益性则存在保护上的悖论,据此,本文认为要以《个人信息保护法》为民法的功能延伸法,并展望个人交易信息财产利益的保护要依靠《大数据法》来实现。更多还原

【Abstract】 In recent years,the vigorous development of big data technology has made China rapidly enter the era of 5G and Internet of Things,people’s convenience of life has been improved,enterprise data analysis methods more scientific,social governance decision-making more accurate.Behind the Internet of Everything is the support of a large amount of information data,personal information is one of the rich and colorful.Data analysis has permeated every aspect of our production life.However,the widespread use of big data also presents the challenge of protecting personal information--the frequent flow of personal information between network platforms and individuals,and the security risks posed by the processing of such information by web platforms.To this end,this paper defines the information flowing between the network platform and the individual as "personal transaction information" and,combined with the practice of analyzing the problems existing in the processing of this information by the network platform,proposes a solution,with a view to providing some reference for the protection of personal information in the context of big data transactions.This paper uses literature research method,empirical research method and legal comparison method to study the handling of personal transaction information in the context of big data transactions and the deficiency of personal transaction information protection in the Civil Code.The main content of the study is four parts.The first part is the introduction.The second part is an overview of the processing of personal information in the context of big data transactions,mainly from personal information to introduce the concept of personal transaction information,and analysis of the content of personal transaction information processing and legal regulations.The third part is to combine the actual case and study the APP privacy policy to find out the problems of personal transaction information processing,and to find out the problems of specific analysis and propose solutions.The fourth part is to discuss the shortcomings of the Civil Code in protecting personal transaction information in the context of big data transactions.It is found that in civil legislation,there are defects in the protection system of personal transaction information,the protection mode of personal transaction information in China is not clear,and the function of personal transaction information protection in the Civil Code is not clear.And put forward corresponding measures to analyze the civil code after the entry into force of personal transaction information mishandling responsibility,clear civil code,personal information protection law,and the future possible "big data law" in personal transaction information has the personality interests and property interests,private interests and public welfare balance.Innovations include: First,the personal information circulating between the network platform and individuals is the most vulnerable to risk of information,and it is proposed to define this information as "personal transaction information".Second,through the study of the text of the mobile app privacy policy and combined with practical cases,it is found that the processing of personal transaction information exists in the collection of legality criteria only "tellconsent",anonymization processing lack of legitimacy and the risk of over-scope sharing.And put forward the design idea of the legitimacy standard:discard the expression "informed consent" to use "informed consent",set the boundary of the collector’s obligation to solve the dilemma of "informed consent",and combine the classification of personal transaction information and the concept of scenario risk,to limit the purpose of the collection of personal transaction information."Informed consent and purpose restriction" as the legal standard for the collection of personal transaction information;Third,in the study of personal transaction information,it is found that it has the dual attribute of personal interest and property interest,but also has the private interest and public welfare,the Civil Code to protect its personal interests mainly,the protection function to private interests first,personal transaction information has property interests and public welfare there is a paradox on protection,according to this paper,The Personal Information Protection Law is an extension of the function of civil law,and it is expected that the protection of personal transaction information property interests will be realized by big data law.更多还原