政府数据开放中个人信息保护效果的量化评估

Quantitative Evaluation of Personal Information Protection Effectiveness in the Government Data Opening

摘要:

政府数据开放中个人信息的规范合理利用能够促进数据要素有序流动，释放数据要素的经济价值；个人信息不当利用则会侵害信息主体的隐私权，甚至会威胁个人信息主体安全，故加强政府数据开放中个人信息保护尤为重要。运用层次分析法将《中华人民共和国个人信息保护法》的外在体系与具体规则转化为3个一级指标和26个二级指标，构建个人信息保护综合评价模型。结合模型对中国26个省级行政区的隐私政策进行实证分析发现，省级政府数据开放平台个人信息保护效果呈现层次性特征，23.1%的数据开放平台个人信息保护效果较好，如江苏省、山东省等；19.2%的数据开放平台个人信息保护效果一般，如河南省、吉林省等；还有57.7%的数据平台个人信息保护效果较差，如山西省、江西省等。整体上看，省级政府数据开放中个人信息保护效果并不理想，政府数据开放中个人信息保护面临信息主体行权困难、信息处理中告知同意规则失灵、敏感信息关注不足、信息侵权救济渠道不畅等困境。这就要求政府数据开放平台聚焦个人信息保护，加快完善相关隐私政策，畅通个人信息权利行使渠道，明晰个人信息处理者权责，强化个人信息的保障与救济，促进个人信息数据规范、有序流动。

Abstract:

The regulated and reasonable use of personal information in gthe opening up of access to government data can promote the orderly flow of data elements and unlock their economic value. However, improper use of personal information may infringe upon individuals' privacy rights and even threaten their safety, making it particularly important to strengthen personal information protection in opening government data. Based on the system logic and specific rules of the Personal Information Protection Law of the People's Republic of China, the external system is summarized into 3 first-level indicators, the specific rules are transformed into 26 second-level indicators, and the comprehensive evaluation model of personal information protection is constructed by employing the analytic hierarchy process. An empirical analysis of the privacy policies of 26 provincial-level administrative regions in China in conducted. It is found that the personal information protection effectiveness of provincial government data opening platforms in China presents hierarchical characteristics: 23.1% of the data opening platforms demonstrate relatively good personal information protection effectiveness, such as Jiangsu, Shandong, Zhejiang, and other 6 provinces; 19.2% of platforms show moderate effectiveness, such as those in Henan, Jilin and other 5 provinces; 57.7% of platforms exhibit poor personal information protection effectiveness, including those in Shanxi, Jiangxi, Beijing, and other 15 provinces and cities. Overall, the effectiveness of personal information protection in provincial government data opening in China is not ideal. It faces challenges such as difficulties for individuals in exercising the right of personal information subjects, the failure of informed consent rules in information processing, insufficient attention to sensitive information, and limited channels for remedying information infringements.This requires government data opening platforms to focus on personal information and privacy protection, refine relevant privacy policies, smooth the exercise of personal information rights channels, clarify the rights and responsibilities of personal information processors, strengthen the protection and relief of personal information, and promote the standardized and orderly flow of personal information data.