《个人信息保护法》的亮点与创新

《个人信息保护法》是一部全面保护个人信息的专门性立法.作为公法和私法的混合,该法的私法部分作为《民法典》的特别法,进一步丰富和发展了《民法典》的个人信息保护规则.《个人信息保护法》在总结《民法典》等的立法经验基础上,借鉴了欧盟《一般数据保护条例》等比较法的经验,形成了诸多的亮点和创新之处.包括进一步扩张了个人信息的保护范围,构建了以"告知—同意"为核心的个人信息处理规则,对自动化决策的全面规范,严格保护敏感个人信息,确认个人在个人信息处理活动中的各项权利,强化个人信息处理者义务,规范国家机关的个人信息处理行为以及个人信息跨境流动,完善了侵害个人信息的法律责任,这些内容都充分彰显了这部法律的时代性、国际性和本土性.

Highlights and Innovation of Personal Information Protection Law

The Personal Information Protection Law is a special legislation for the comprehensive protection of personal information. As a mixture of public law and private law, its private law, as a special law of the Civil Code, further enriches and develops the personal information protection rules of the Civil Code. On the basis of summarizing the legislative experience of the Civil Code, the Personal Information Protection Law draws on the experience of comparative laws such as the EU General Data Protection Regulation, and has formed many highlights and innovative features, including further expanding the protection scope of personal information, constructing personal information processing rules with "informed consent" as the core, comprehensively standardizing automatic decision-making, strictly protecting sensitive personal information, confirming individual rights in personal information processing activities, strengthening the obligations of personal information processors, standardizing the personal information processing behavior of state organs and the cross-border flow of personal information, and improving the legal liability for infringement of personal information. These highlights and features fully demonstrate the timeliness, internationality and localization of this legislation.