摘要：

“合法、正当、必要原则”已成为个人信息处理的基本原则。个人信息保护的告知同意机制日益流于形式，而且存在适用例外，在个人信息权利化存在困境的现实情境下，“合法、正当、必要原则”可以实现个人信息保护与合理利用的平衡。“合法原则”属于形式合法性范畴。“正当原则”要求个人信息处理必须出于特定、明确、合理的目的。为了实现个人信息社会价值的最大化，应允许个人信息处理者在符合个人合理预期的条件下，适当变更原初目的。“必要原则”包括禁止过度损害和禁止保障不足两大方面。它既要求处理个人信息时应在有助于目的实现的必要范围内运用最小损害的手段，又要求采取必要措施最大程度保障个人信息安全。“正当、必要原则”有利于弥补数字时代意思自治与契约自由的缺陷，可以矫正个人信息处理者同个人之间日益严重失衡的不平等态势，实际上是比例原则在私法中的体现。

关键词: 个人信息处理, 合法、正当、必要原则, 个人信息保护, 比例原则

Abstract:

The principle of legality，legitimacy and necessity has become the basic principle of personal information processing.The notification and consent mechanism for the protection of personal information is having more and more mere formality，and there are applicable exceptions.In the reality of the dilemma of personal information rights，“the principle of legality，legitimacy and necessity”can achieve a balance between personal information protection and circulation.The“principle of legitimacy”requires that the processing of personal information must aim at specific，clear and reasonable purposes.In order to maximize the social value of personal information，the personal information processor should be allowed to appropriately change the original purpose under the conditions that meet the individual's reasonable expectations.“The principle of necessity”includes the prohibition of excessive damage and the prohibition of insufficient protection.It not only requires the use of minimally harmful means when handling personal information within the scope necessary to achieve the purpose，but also requires the adoption of necessary measures to ensure the security of personal information to the greatest extent.“The principle of legality，legitimacy and necessity”helps to make up for the shortcomings of autonomy of will and freedom of contract in the digital age，and can correct the increasingly serious inequality between personal information processors and individuals.In fact，it is the embodiment of the principle of proportionality in private law.

Key words: Personal Information Processing；Principle of Legality, Legitimacy and Necessity；Personal Information Protection；Proportionality Principle