在大数据时代个人信息安全与数据流转的矛盾日益凸显的环境中，对同意机制和隐私条款的设计是平衡个人信息保护与信息流转效率的重要途径。在2017年12月29日发布的《信息安全技术 个人信息安全规范》（以下简称《个人信息安全规范》）中，同意机制占据重要地位。我国对欧盟相关规则进行借鉴融合，并在同意内容的区分和告知方式等方面进行创新。但与欧盟《指南》相比，我国规范还不够严格细致。我国应进一步做出针对同意机制的指导，细化同意标准，以最大化保障数据主体的知情权和选择权。
In the big data era，the contradiction between personal information security and data circulation becomes more and more seriously，the design of consent mechanisms and privacy provisions is an important approach to balance the protection of personal information and the efficiency of information transfer. In the “Personal Information Security Standard”（GB/T 35273-2017）published on December 29，2017，the consent mechanism plays an important role. China has learned from the rules of the EU and has made its own new rules in respect of distinguishing the form of consent and so on. However，comparing with the EU “Guidelines”，China's Standard is not comprehensive enough. China should further provides guidance on the consent mechanism and refine the criteria of consent to protect the right of information and choice of data subject.
