《个人信息保护法》中“告知–同意”规则探析
Analysis on the “Notice-Consent” Rule in the Personal Information Protection Law

随着社会的不断发展，个人信息的重要性日益凸显，并在各个领域广泛应用，《中华人民共和国个人信息保护法》应运而生，构筑了以“告知–同意”为核心的处理规则。然而，在大数据时代，现行法律框架下的“告知–同意”规则虽取得一定成效，但由于信息处理技术的复杂性，导致实践中出现了信息处理者的告知可能过于复杂使信息主体知情不足、企业告知方式存在缺陷使用户同意流于形式、部分用户对“告知–同意”规则的认识不足、企业在收集和使用个人信息时存在欺诈和误导行为等诸多问题，使得个人信息难以在“告知–同意”规则的适用下得到有效保护。针对“告知–同意”规则实践中的突出问题，本文建议加强信息处理者的法律责任、建立完善的信息告知和同意机制、加强对于个人信息安全和隐私保护意识的宣传和教育，以确保个人信息得到全面、有效的保护。
With the continuous development of society, the importance of personal information has become increasingly prominent, and is widely used in various fields. The Personal Information Protection Law of the People’s Republic of China came into being, and established the processing rules with “informing-consent” as the core. However, in the era of big data, although the “notify-consent” rule under the current legal framework has achieved some results, due to the complexity of information processing technology, as a result, there are many problems in practice, such as excessive complexity of information processors’ notification, insufficient knowledge of information subjects, defects in enterprise notification methods, insufficient understanding of user consent, and fraud and misleading behaviors in the collection and use of personal information by enterprises. It makes it difficult for personal information to be effectively protected under the application of the “notice- consent” rule. In view of the prominent problems in the practice of the “notify-consent” rule, this paper proposes to strengthen the legal responsibility of information processors, establish a sound information notification and consent mechanism, and strengthen the publicity and education on the awareness of personal information security and privacy protection, so as to ensure the comprehensive and effective protection of personal information.