【线上云德】疫情期间律师说（一百三十一）┃关于个人信息保护的法律问题

《民法典》已于2020年5月28日由第十三届全国人大第三次会议通过，将于2021年1月1日起施行。《民法典》的亮点之一就是将个人信息保护独立成章列入人格权编。

The Civil Code was adopted by the Third Session of the Thirteenth National People's Congress on May 28, 2020, and will be implemented on January 1, 2021. One of the highlights of the "Civil Code" is to include the protection of personal information as a separate chapter in the personality rights.

自然人的个人信息受法律保护。个人信息是以电子或者其他方式记录的能够单独或者与其他信息结合识别特定自然人的各种信息，包括自然人的姓名、出生日期、身份证件号码、生物识别信息、住址、电话号码、电子邮箱、健康信息、行踪信息。个人信息中的私密信息，适用有关隐私权的规定。

可以看出，个人信息包括三个基本要素：1、信息的主体为自然人，不包括法人和非法人组织；2、个人信息是以电子方式记录或者以其他方式记录的信息；3、具有可识别性，能够单独或者与其他信息结合识别自然人的个人身份。

The personal information of natural persons is protected by law. Personal information is various information recorded electronically or in other ways that can identify a specific natural person alone or in combination with other information, including the natural person’s name, date of birth, ID number, biometric information, address, phone number, email address, health Information, whereabouts information. The private information in personal information shall be governed by the privacy regulations.

It can be seen that personal information includes three basic elements: 1. The subject of the information is a natural person, excluding legal persons and unincorporated organizations; 2. Personal information is information recorded electronically or in other ways; 3. It is identifiable Sexuality can identify the personal identity of natural persons alone or in combination with other information.

信息处理者不得泄露或者篡改其收集、存储的个人信息；未经自然人同意，不得向他人非法提供其个人信息，但是经过加工无法识别特定个人且不能复原的除外。信息处理者应当采取技术措施和其他必要措施，确保其收集、存储的个人信息安全，防止泄露、篡改、丢失；发生或者可能发生个人信息泄露、篡改、丢失的，应当及时采取补救措施，按照规定告知自然人并向有关主管部门报告。

侵犯公民个人信息，应承担相应的民事责任，情节严重的，还可能会触及犯刑法，承担刑事责任。同时，公民在使用自己个人信息时要有一定的防范意识，防止信息被不法分子利用。

The information processor shall not disclose or tamper with the personal information it collects or stores; without the consent of the natural person, it shall not illegally provide its personal information to others, except for those who cannot be identified and cannot be recovered after processing. Information processors should take technical measures and other necessary measures to ensure the security of the personal information they collect and store to prevent leakage, tampering, or loss; if leakage, tampering, or loss of personal information occurs or may occur, remedial measures should be taken in a timely manner, in accordance with regulations Inform the natural person and report to the relevant competent department.

Infringement of citizens’personal information shall bear corresponding civil liability. If the circumstances are serious, they may also violate the criminal law and bear criminal responsibility. At the same time, citizens must have a certain sense of prevention when using their personal information to prevent the information from being used by criminals.