摘要： 个人信息保护与数据利用是现代数字社会中现存的一对主要矛盾，而厘清数据、信息与隐私三者的法律界限与法律属性是解决这对矛盾的理论前提。简单说，隐私的法律属性是人格权益，它只能被自然人享有，除非有法律明确规定，在其他任何条件下都不能被转让与利用；信息的法律属性尽管亦为人格权益，其权利主体可以是所有类型的民事主体，即自然人、法人与非法人组织等，但此种人格权益经公开化权或商品化权转化后的财产利益，可以被他人转让与利用，只不过需要征得权利主体的同意；数据（狭义理解，即经清洗、加密等脱敏手段处理后无从识别信息主体身份的信息）的法律属性是财产权益，其权利主体可为任何民事主体，可以自由转让，且无须也无从征得信息主体的同意。隐私、信息与数据三个概念的法理厘清，不仅为能否利用数据、信息提供了法理支撑，而且为如何利用数据与信息的具体制度设计提供了法理依据。

关键词: 数字社会, 数据, 信息, 隐私, 数据利用

Abstract: The con?ict between individual information protection and data utilization is a main existing contradiction in modern digital society, and to clarify legal boundaries and legal attributes among data, information and privacy is the theoretical premise to solve this contradiction. In brief, the legal attribute of privacy is a kind of personality interests and can only be entitled to natural person. It can never be transferred or be used in any circumstances unless being stipulated by law. The legal attribute of information is also a kind of personality information, however it can be entitled to all types of civil subjects, i.e. natural person, legal person as well as unincorporated associations. The property interest which is commercialized from the personality interest by publicity can be transferred to and utilized by others provided the permission of the subject of right. As for the attribute of data is property right. It can be entitled to any kind of civil subjects, and also can be transferred without permission of the principle of the information.

Key words:  digital society, data, information, privacy, data utilization