基于Cookie技术的隐私侵权裁判立场之再检视

对于Cookie信息的商业利用,网络服务商应充分考量信息内容的敏感度,确保网络用户享有充分的选择自由。以我国Cookie技术与隐私权纠纷第一案为例,重新审视精准广告推送一般不构成隐私侵权的裁判立场,对于个人网络痕迹不能一概采取“默示许可”,而“严重损害后果”之认定亦应从宽。在规制路径的设计上,有必要厘清隐私和个人信息的界限,并根据数据的属性和用途划分隐私风险的层级,基于具体信息利用场景进行提示义务的配置和治理框架的制定。

Reexamination of Judgment Position of Privacy Infringement Based on Cookie Technology

In order to make full use of Cookie information,internet service providers should take the sensitivity of information content into account to ensure that internet users have full freedom of choice.Taking the first case of Cookie technology and privacy right dispute in China as an example,this paper proposes to re-examine the judgment position that precise advertising push does not constitute privacy infringement in general,“implied license”for individual network traces should not be adopted,while the determination of“serious damage consequence”should be lenient.In terms of the design of regulation path,it is necessary to clarify the boundary between privacy and personal information,divide the hierarchy of privacy risk according to the attributes and purposes of data,configure prompt obligation and formulate governance framework based on specific information utilization scenarios.