法学家 ›› 2025, Vol. 0 ›› Issue (4): 61-73.

• 主题研讨二:数字法学研究的多维视角 • 上一篇    下一篇

生成式人工智能背景下的个人信息保护:范式转换与规则完善

叶雄彪   

  • 出版日期:2025-07-15 发布日期:2025-07-08
  • 作者简介:*叶雄彪,法学博士,华中师范大学法学院讲师。
  • 基金资助:
    本文系国家社会科学基金重大项目“中国共产党土地政策法规资料收集整理与数据库建设”(22&ZD021)的阶段性成果。

Personal Information Protection in the Context of Generative Artificial Intelligence: Paradigm Shift and Rule Improvement

YE Xiongbiao   

  • Online:2025-07-15 Published:2025-07-08
  • About author:Ye Xiongbiao, Ph.D. in Law, Lecturer of Central China Normal University Law School.

摘要: 大数据刺激了生成式人工智能的智力涌现,也加剧了数字时代的隐私和个人信息保护难题。算法和大数据的叠加让生成式人工智能的数据处理过程迥异于传统网络服务,呈现出自动化、规模化和多样化特征。既有个人信息保护基础理论和相关规则难以在生成式人工智能领域有效适用,无法为用户信息权益和其他人身财产权益提供合理保护,更无法有效抑制违法数据处理导致的其他社会风险。面向人工智能时代的个人信息保护规则,需要以风险防控为核心,以国家强制力约束生成式人工智能设计者、研发者和提供者等主体的数据处理行为,并进一步完善个人信息获取规则、使用规则、存储和流通规则及救济规则。

关键词: 生成式人工智能, 个人信息保护, 技术原理, 风险防控

Abstract: The intellectual "emergence" of generative artificial intelligence has been stimulated by big data, but it has also intensified the challenges of privacy and personal information protection in the digital age.The integration of algorithms and big data had made the data processing of generative artificial intelligence significantly different from traditional network services.The existing fundamental theories and relevant rules of personal information protection are difficult to apply effectively within the realm of generative artificial intelligence, failing to provide reasonable protection for users' information rights along with other personal and property rights.Moreover, they are unable to effectively curb other social risks arising from illegal data processing.The personal information protection rules for the AI era need to prioritize risk prevention and control, using coercive power of the state to constrain the data processing activities of generative artificial intelligence designers, developers, and providers.Furthermore, it is necessary to improve the rules for information acquisition, usage, storage, circulation and remedies.

Key words: Generative Artificial Intelligence, Personal Information Protection, Technical Principles, Risk Prevention and Control