个人数据保护困境与法律出路：以大数据时代的法律挑战为背景——杭州市上城区人民检察院诉孙某非法买卖个人信息民事公益诉讼案评析¹
Personal Data Protection Dilemmas and Legal Solutions: Against the Backdrop of Legal Challenges in the Big Data Era—Case Analysis: Hangzhou Shangcheng District People’s Procuratorate v. Sun Mou—A Civil Public Interest Litigation on Illegal Trading of Personal Information

大数据和人工智能技术的飞速发展使个人数据成为数字经济的重要组成部分。尽管个人数据的商业价值不断被挖掘，但数据滥用和隐私侵害问题也随之加剧。本文以杭州市上城区人民检察院诉孙某非法买卖个人信息民事公益诉讼案为切入点，探讨现行法律框架在个人数据保护中的不足，重点分析了“知情–同意”规则的实际操作困境、数据经济利益归属问题以及跨境数据流通的法律挑战。本文提出，应通过完善“知情–同意”规则、明确数据经济利益归属、加强公益诉讼机制等路径，平衡个人数据保护与数据流通效率之间的矛盾，为数字经济的健康发展提供法律保障。
The rapid development of big data and artificial intelligence technologies has made personal data an important component of the digital economy. Although the commercial value of personal data is constantly being explored, the problems of data abuse and privacy infringement have also intensified. This article takes the civil public interest lawsuit filed by the People’s Procuratorate of Shangcheng District, Hangzhou City against Sun for illegally trading personal information as a starting point to discuss the deficiencies of the current legal framework in protecting personal data. It focuses on analyzing the practical operational difficulties of the “informed consent” rule, the issue of data economic interest attribution, and the legal challenges of cross-border data circulation. This article proposes that the contradiction between personal data protection and the efficiency of data circulation should be balanced through improving the “informed consent” rule, clarifying the attribution of data economic interests, and strengthening the public interest litigation mechanism, so as to provide legal guarantees for the healthy development of the digital economy.