隨著隱私意識的抬頭,如何能更保障人民的隱私權一直都是備受討論的議題,大法官更是在司法院第603號解釋肯認隱私權受憲法第22條保障。然全民健康資料庫的加值服務產生爭議,不僅人民沒有事前同意權,也無事後退出權,甚至還有目的外利用以及去識別化規範模糊等問題存在。因此本文從我國的全民健康保險資料庫出發,探討111年憲法法庭判字13號,並以此延伸討論資訊自決權中的退出權與公共利益之衡平問題,以及藉由英國退出權實例:The Care. Data Programme Opt-Out及National Data Programme Opt-Out作為我國退出權之借鏡。並點出我國其他可能有類似隱私疑慮的資料庫、我國現行資訊自決權現況、常見同意權行使模式與其他資料庫退出權模式,以此提出我國未來政策建議。
本研究以資料庫應用與退出為中心探討資訊自決權之法律與政策,以我國個人資料保護法觀之,退出權著實為資訊自決權之一環,然以具有「公共利益」為由是否得限制人民行使資訊自決權之退出權?此議題有深入討論之必要。然本文透過文獻分析法釐清相關爭點,發現多數資料庫對個人資訊自決權的保護並不周全,若資料主體當事人無法隨時對其資料被蒐集利用撤回同意,則顯然其資訊自決權並未得到自主性。因此本文認為儘管資料庫蒐集、利用資料時具有公共利益,仍須要注意其與資訊自決權之衡平,退出權為人民對其資料自決最後的防禦手段,不應被完全剝奪。故政府應建置完善的退出權制度,並可參考英國退出權模式,建立與民眾的信任以降低資料的退出率,而非以剝奪退出權之手段維持數據之精準度。 ;The importance of the right to privacy has always been widely discussed as privacy awareness has been raised. The Grand Justices of the Republic of China have recognized the protection of privacy rights under Article 22 of the Constitution in Interpretation No. 603 of the Judicial Yuan.
However, the value-added services of the National Health Database have generated controversy with the people’s lack of prior consent and the right to opt-out post-treatment. In addition, the purposeful misuse of information and the vagueness of regulation in de-identification are contributors to the incomplete protection of the right to privacy.
This thesis begins with the discussion of the national health insurance litigation case in the Republic of China by exploring Constitutional Court Ruling No. 13 of the 111th Judicial year and extends to the balance between the right to opt-out and the public interest in self-determined information.
The Care Data Program Opt-Out and National Data Opt-Out Program from the United Kingdom are referenced for the right to opt out in our country. By searching databases with privacy concerns, recognizing current status of self determinative information, revising common models of consent and opt-out models in databases, a conclusion in the right to privacy is proposed for the future policy.
This study focuses on the legal and policy aspects of information self-determination in the context of database application and opt-out through literature analysis. It was determined that most databases do not protect information self-determination by not providing an option to opt out. The deprivation of the right to opt out, the right to information self-determination will not be autonomous, which violates the Personal Data Protection Act of the Republic of China.
Nevertheless, the right to opt out is a part of information self-determination recorded in the Personal Data Protection Act, a debate on public interest and right to opt out remains. The claims in fearing the rights to opt out will jeopardize the utilization of personal data in scientific research by the Ministry of Health and Welfare.
In the consideration of both parties, this thesis suggests a consensus between the use of personal data for public interests and right to information self-determination through data collection given the option to opt out under lawful specification.Since the right to opt out is the last line of lawful security to data self-determination, it should not be deprived from the people.
In summary, the government should establish a standardized system for the right to opt out through referring to the National Data Opt-Out Program in the United Kingdom for the right to information self-determination in the Personal Data Protection Act at the Republic of China.