重大疫情防控中的个人信息保护研究——基于隐私保护设计理论

目的/意义] 新冠疫情防控期间个人移动轨迹、关系图谱、电子健康码等个人信息在精准定位疫情传播、防止疫情扩散和推进复工复产等方面发挥了重要的作用，但由于缺乏一定的信息采集保护机制和共享安全规则面临着个人信息滥用和泄露的风险，突发公共卫生事件下如何平衡信息利用和个人信息保护意义重大。方法/过程] 本文从疫情防控背景下个人信息保护涉及的个人信息主体、个人信息收集和处理者、数据治理监管者三方出发，构建面向隐私保护设计的个人信息全生命周期保护框架，通过对个人信息采集、存储组织、分享利用和处置归档等过程的有效控制，建立个人信息合法合规使用的良性生态。结果/结论] 疫情防控背景下个人信息保护涉及多元利益主体，需要重视对个人隐私信息的收集和利用，兼顾经济、社会发展和个人隐私保护需求，更好地实现个人信息的社会价值。面向隐私保护设计的个人信息全生命周期保护框架的提出对于进一步规范疫情防控背景下个人信息采集、存储组织、分享利用和合理处置具有一定的指导性意义。未来还需要在实践中进行探索和完善个人信息安全治理体系，构建应急预防和社会救济为一体的保护体系，设置独立的个人隐私保护监管机构，完善国家应急管理情报体系建设。

Research on Personal Information Protection of Major Epidemic Prevention and Control ——Based on Privacy by Design Theory

Purpose/Significance] During the period of COVID-19 prevention and control,personal information such as personal movement trajectory,relationship map and electronic health code played an important role in accurately positioning the spread of the epidemic,preventing the spread of the epidemic and promoting the resumption of work and production.Due to the lack of certain information collection and protection mechanism and sharing security rules,the risk of personal information abuse and leakage is faced.How to balance the use and protection of personal information is of great significance on the background of public health emergencie.Method/Process] This paper constructed the whole life cycle protection framework of personal information designed for privacy protection,from the perspective of personal information subject,personal information collector and processor,and data governance supervisor involved in the protection of personal information under the background of epidemic prevention and control.Result/Conclusion] Under the background of epidemic prevention and control,the protection of personal information involves multiple stakeholders,so it is necessary to pay attention to the collection and utilization of personal privacy information,taking into account the needs of economic and social development and personal privacy protection,so as to better realize the social value of personal information.The whole life cycle protection framework of personal information designed for privacy protection had certain guiding significance for further standardizing personal information collection,storage organization,sharing and utilization and reasonable disposal under the background of epidemic prevention and control.In the future,we needed to explore and improve the personal information security governance system in practice,build a protection system integrating emergency prevention and social relief,set up an independent personal privacy protection regulatory agency,and improve the construction of national emergency management information system.