公法介入私域:平台中的个人信息保护
作者简介:韩思阳,上海师范大学法政学院副教授(上海 200234)
基金项目:
本文系国家社科基金一般项目“行政协议判断标准的体系构造研究”(20BFX054)的阶段性成果
摘要: 平台处理个人信息本是私法问题,公法介入保护需审慎,公法保护个人信息不能仅基于功能主义,还应基于规范主义考察。在场景构造上,个人信息可能关涉公共利益,平台也可能因履行公共职能而做出国家行为,公法只有基于公益维护和针对平台国家行为才可介入。保护路径方面,当基于公共利益保护个人信息时,行政主体可采用事前许可、事中监管与事后处置等方式保护个人信息,个人、检察机关也可提起行政诉讼督促行政主体履行保护职责。当针对平台国家行为保护个人信息时,可将公法以直接或间接方式适用于平台行为和损害救济。公法介入个人信息保护应确立合理限度。公法基于公共利益保护个人信息应以平台违反公法义务或违反私法义务达到一定规模为前提,公法针对平台国家行为保护个人信息时,应只对平台准行政行为渐进适用公法。
Public Law Intervention in Private Domain: Personal Information Protection in Platforms
Abstract: The processing of personal information on the platform is a private law issue, and public law protection needs to be demonstrated. The protection of personal information by public law should not only be based on functionalism, but also on normative considerations. In terms of scenario construction, personal information may be related to public interests, and platform may also engage in state action due to the performance of public functions, public law can only be involved based on public interests maintenance and targeting platform state action. In terms of protection path, when protecting personal information based on public interests, administrative agency can protect personal information by means of prior permission, in-process supervision, and post processing. Individuals and procuratorate can also file administrative lawsuits to urge administrative agency to perform their protection responsibilities. When protecting personal information against platform state action, public law can be applied directly or indirectly to platform behavior and damage relief. Public law intervention in personal information protection should establish a reasonable limit. The protection of personal information by public law based on public interests should be based on the premise that the platform violates public law obligations or violates private law obligations to a certain extent. When the public law protects personal information for state action of the platform, it should only apply public law to quasi administrative action of the platform.