Abstract: With the development of digital technology and the acceleration of the process of big data, the dissemination channels and modes of personal information have become more and more complex, and infringement of personal information is frequent, which seriously affects the legitimate rights and interests of personal information subjects. An empirical analysis of the relevant case database in the past three years has revealed that, due to the nature of personal information, there are difficulties in determining the damage in personal information infringement cases, and difficulties in proving the infringed person’s case. The introduction of risk damage into the field of tort liability law, the adoption of dynamic standards for the determination of damage to personal information infringement, the lowering of the threshold for the determination of damage to personal information under certain standards, the improvement of the personal information infringement law protection system, the determination of a reasonable scope of compensable risk damage to personal information, so that the legitimate rights and interests of personal information of information subjects are duly protected.

Key words: personal information, Tort Liability, Determination of Damage, Risk-based Damage, Social Risks

摘要： 随着数字技术的发展与大数据进程的加快，个人信息的传播途径和模式愈加复杂，个人信息侵权行为频发，严重影响个人信息主体的合法权益.通过对相关案例数据库过去3年已生效的以个人信息纠纷为案由的裁判文书进行实证分析发现，因个人信息的特性，个人信息侵权案件中存在损害认定困难、被侵权人举证困难等问题.将风险损害引入侵权责任法领域，采取损害认定动态标准对个人信息侵权损害进行认定，在一定标准下降低个人信息损害认定门槛，完善个人信息侵权法保障体系，确定合理的个人信息风险损害的可赔范围，使信息主体的个人信息合法权益得到应有的保护.

关键词: 个人信息, 侵权责任, 损害认定, 风险性损害, 社会风险