过度收集和滥用个人网络行为信息会损害信息主体的权利和自由，阻碍数字经济发展。当下，对个人网络行为信息的法律定性悬而未决，导致相应的保护规则与秩序构建徘徊不前。传统信息主体赋权保护路径无法妥善解决信息关系中的权力结构失衡问题，应将个人网络行为信息纳入个人信息范畴，对其进行人格利益和财产利益的双重保护。新技术条件下，信息主体与信息控制者之间存在事实上的信息信义关系，个人信息保护路径应从赋权模式转向行为规制模式，充分运用权利分割思想，借鉴信托制度，积极探索以信义义务为核心的数据信托机制，兼顾信息主体利益和数字经济发展要求。

The excessive collection and misuse of personal online behavior information negatively affects the rights and freedom of data subjects and has become a major obstacle to the development of the digital economy. Due to the ambiguous legal attributes of personal online behavior information, the corresponding
protection rules and order building remain dismal. Traditional path of data subject empowerment cannot properly solve the problem of power imbalance in unequal information relationships. Personal online behavior information should be included in the category of personal information and protected with both personality interest and property interest. Under the new technological conditions, there is a de facto information fiduciary relationship between data subjects and data controllers. The protection of personal information should shift from the empowerment mode to the behavior regulation mode, fully apply the idea of division of rights, draw on the institutional norms of trust law, actively explore the data trust mechanism with fiduciary duty as the core, and come out with a protection path that balances the interests of data subject and the development of digital economy.