摘要
在法律、行政法规未作特别规定时,处理个人信息应当取得个人同意,否则即属违法。个人信息处理中的个人同意不是作为法律行为核心要素的意思表示,不属于人格权商业化利用中权利人的许可。就个人同意的性质而言,从消极方面看是违法阻却事由,即排除了客观上侵入个人信息权益的处理行为的非法性,而从积极方面看,则属于个人信息处理的合法根据。意思表示的瑕疵及撤销、撤回的规则不能当然适用于个人信息处理中的个人同意。个人同意的生效须具备同意能力、充分知情、真实自愿及明确具体等要件。我国个人信息保护法中规定的明确同意、单独同意与书面同意这三者间既有联系又有区别。
In the absence of special provisions in laws and administrative regulations,the controller in the processing of personal information shall obtain the consent of the individuals whose personal information is collected and processed,otherwise the processing of the information is illegal.The individual’s consent is neither the declaration of intention as the core element of juristic act,nor the permission of the subject in the commercialization of personality right.In terms of the nature of individual consent,from a negative point of view,it is a legal justification that excludes the illegality of objective invasion of the rights and interests of personal information,while from a positive point of view,it is one of the legal justifications of processing of personal information.The defects of declaration of intention and the rules of revocation and withdrawal are not necessarily applicable to the individual’s consent in the processing of personal information.In order for an individual’s consent to be valid,the individual must have the capacity for consent and is fully informed,and the consent must be freely given,and specifically and unambiguously indicate the subject’s wishes.There are both connections and differences among three types of consent in China’s Personal Information Protection Law:explicit consent,independent consent and written consent.
出处
《环球法律评论》
CSSCI
北大核心
2021年第6期40-55,共16页
Global Law Review
基金
2018年度国家社会科学基金重大项目“大数据时代个人数据保护与数据权利体系研究”(18ZDA146)的研究成果。
