Legal Attributes of IP Attribution Information under China’s PIPL: Clarification of Identifiability Terminology and Operationalisation of Identifiability Criteria
- 1 Law School, Nankai University, Tianjin, China
- 2 Law School, University of International Business and Economics, Beijing, China
Abstract
Major Chinese internet platforms recently introduced the function of revealing users’ IP attribution information. However, it is unclear whether such information fall under China’s PIPL’s definition of “personal (identified) information”, as the law does not clearly define the identifiability terminology, nor does it provide an operational approach to the identifiability criteria. Combining research methods such as comparative law studies and case studies, this difficulty in the application of the PIPL can be resolved from two mutually complementary directions. First, the identifiability terminology in China’s PIPL can be specified into three different sets of connotations, only one of which needs to be satisfied by the target information: direct or indirect identification, identified or possible identification, identity or feature identification. Secondly, the identifiability criteria can be made operational through a joint horizontal and vertical evaluation system in which the following two elements must be satisfied simultaneously: the horizontal distinction between the target user and other users, and the vertical counterpart between the target message and the target user. In particular, it is more appropriate for the practitioners of China’s PIPL to tackle their vertical counterpart evaluation with the “subjective/relative approach”. By using the aforementioned methods, it may be proven that IP attribution information qualifies as “personal information” under Chinese law and society. Other information with unclear legal attributes can also benefit from the above general approach and deductive demonstration.
- Aoligei Say (2022, May 6). Why did Ma Make a Mess? Why Is the IP Going Public? Be Wary of the Trap of Subverting the State. https://www.163.com/dy/article/H6NF7JQM0552YQ30.html
- Article 29 Data Protection Working Party (Art. 29 WP) (2007). Opinion 4/2007 on the Concept of Personal Data (01248/07/EN. (2007)). https://www.clinicalstudydatarequest.com/Documents/Privacy-European-guidance.pdf
- Bygrave, L. A., & Tosoni, L. (2020). Article 4.1. In C. Kuner, L. A. Bygrave, & C. Docksey (Eds.), The EU General Data Protection Regulation (GDPR): A Commentary (pp. 103-115). Oxford University Press.
- Cao, B. (2022). Reflection and Reconstruction on the Interpretation Path of Personal Information Identifiability. Administrative Law Review, 4, 133-144.
- Cheng, J. F. (2008). The Role of MAC and IP Addresses in Computer Networks. Science and Technology of West China, 7, 26-27+53.
- Gao, F. (2021). Personal Information Processing: The Object of the China’s Personal Information Protection Act. Studies in Law and Business, 38, 73-86.
- Garfinkel, S. L. (2015). De-Identification of Personal Information (NIST IR 8053). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.IR.8053
- He, J. (2022, April 30). Are You Afraid when IP Attribution Information Are Revealed? https://baijiahao.baidu.com/s?id=1731484009244110667&wfr=spider&for=pc
- Leenes, R. E. (2007). Do They Know Me? Deconstructing Identifiability. University of Ottawa Law and Technology Journal, 4, 135-161.
- Li, B. C., Xiong, Y., Huang, T., & Pan, L. (2020). Simulation-Deduction Model and System Construction of Intelligent Guidance of Network Public Opinion. National Defense Technology, 41, 35-40.
- Liu, Y. P., & Lu, Z. X. (2002). Limitation in Binding MAC and IP. Application Research of Computers, 9, 83-85.
- Niemann, F., & Schuessler, L. (2016, October 21). CJEU Decision on Dynamic IP Addresses Touches Fundamental DP Law Questions. Bird & Bird. https://www.twobirds.com/en/insights/2016/global/cjeu-decision-on-dynamic-ip-addresses-touches-fundamental-dp-law-questions
- Nissenbaum, H. (2018). Respecting Context to Protect Privacy: Why Meaning Matters. Science and Engineering Ethics, 24, 831-852. https://doi.org/10.1007/s11948-015-9674-9
- Purtova, N. (2018). The Law of Everything. Broad Concept of Personal Data and Future of EU Data Protection Law. Law, Innovation and Technology, 10, 40-81. https://doi.org/10.1080/17579961.2018.1452176