Research on the realization path of the right to carry personal information
个人信息可携带权的实现路径研究

摘要

我国《个人信息保护法》以赋权的方式确定了公民的个人信息可携带权，但因存在客体模糊、路径缺失、技术障碍等问题，导致权利难以落地。在属性层面，可携带权是一种“数据主导权”，旨在将个人信息的控制权从平台转移至用户，兼具人格权与财产权双重属性，并体现为公法对私法不足的必要补充。客体方面，以“包容化”思路重塑客体范围：除非平台能证明转移侵害其商业秘密或正当利益，否则用户账号内全部数据均应允许携转，单账户数据不构成商业秘密。在实现路径上，通过区块链技术的应用，既能解决个人信息转移过程中的安全问题，又能降低转移成本。

Abstract

China's Personal Information Protection Law has determined citizens' right to carry their personal information through empowerment. However, due to issues such as ambiguous objects, missing paths, and technical obstacles, this right is difficult to be implemented. At the attribute level, the right of portability is a kind of "data dominance right", aiming to transfer the control of personal information from the platform to the user. It has dual attributes of personality rights and property rights and is reflected as a necessary supplement to the insufficiency of private law by public law. In terms of the object, the scope of the object should be reshaped with an "inclusive" approach: Unless the platform can prove that the transfer infringes upon its trade secrets or legitimate interests, all data within the user account should be allowed to be transferred, and the data of a single account does not constitute a trade secret. In terms of implementation, through the application of blockchain technology, not only can the security issues during the transfer of personal information be resolved, but also the transfer costs can be reduced.