中国未成年人网络个人信息保护的立法进路――对“监护人或家长同意”机制的反思
Approach to Children’s Online Data Protection in China: From the Perspective of a Parental Consent Term in the U.S.and EU

未成年人网络个人信息保护应当从监护人和网络服务提供者共同担责转型为由网络服务提供者主要承担、监护人教育辅助。国际通行的“可验证的家长同意”机制从实践角度观察是无效的,主要原因在于:建立在隐私控制理论基础上的同意机制本身的无效; 以年龄划分为基准的监护人同意机制的不确定性以及监护人主观上的不确信; 技术和成本上的难题。因此,在网络服务提供者主要承担未成年人网络个人信息保护责任的范式下,应当建立“在不同的场景下通过设计来保护隐私”的规则,并制定与该规则配套的整体机制,尤其应发挥行业自律组织的作用。同时,监护人应当担负教育未成年人的责任,多与未成年人进行沟通,构建和谐的亲子关系。
The current mechanism of protecting minors’ online personal information is to obtain a verifiable parental consent before collecting and using children’s personal information, which seems to be ineffective.In my view, the responsibility to protect children online should be shifted from parents to Internet service providers.The reasons are as below.First, consent based on the privacy control theory is invalid nowadays.Second, age-based parental consent is debatable.Moreover, guardians may help their children cheating on the age in certain contexts.Besides, technique and cost issues existed to fulfill a verifiable consent.Therefore, paradigm should be switched to a contextual approach on privacy by design.And we should design the whole mechanism based on the new paradigm, especially relying on the industry self-discipline.And a good parenthood relationship will benefit a lot to minors’ privacy protection online, as well