随着云计算、物联网等新兴信息产业技术的兴起，数据产业飞速发展，正在引发一场对于思维方式和社会形态的变革，对现代社会产生着全面和深刻的影响。与此同时，自2010年起，伴随着中央和地方关于促进大数据行业发展的政策密集出台、积极布局，我国数据交易市场亦不断壮大，数据交易正愈发成为一个隐含深度价值的重要产业。近年来，我国数据交易规模不断扩大的同时，数据有关立法和研究相对滞后，无法适应数据交易发展的步伐，使得我国当前的数据交易面临着交易主体准入标准不健全、数据权属不明确、交易标的不明确、交易定价机制缺失、个人信息保护力度不足等方面的问题。这一方面影响了数据交易的进一步发展，另一方面也不利于数据交易过程中对个人信息的保护。 具体而言，从数据交易的主体和对象来看，数据之上权利的属性及归属都没有明确的法律规范进行调整。数据本身具有开放、共享、无形的特点，此外，其还存在维护排他性成本过高、交易并不必然转移所有权等特性，加上债权相对性的影响，决定了数据无法纳入当下的物权、知识产权和债权的调整范畴，现有的民法理论体系和成文法规均无法全面、准确地界定数据权利的法律属性。同时，数据本身的权利归属具有不确定性。在同数据相关的法律关系中，各参与方可以主张何种权利以及由谁进行主张等问题在现行法律框架下都没有统一的答案。 就数据交易的相关行为规则而言，我国当前立法层面上缺乏统一的数据交易相关行为规则。当前的数据交易相关规则主要由大数据交易平台主导，不同平台的交易规则存在一定程度的差异，且有关规则难以完全契合数据交易的特性，交易方式以及交易定价等核心规则也不能很好地解决现实问题。具体到数据交易过程中的个人信息保护机制，现有的起步较晚、分布零散、内容笼统、效力层级相对较低的立法现状也是亟待改善。 从比较法的角度考察，相较于美国、德国和欧盟，我国数据交易法律规制体系主要存在以下问题。首先，数据绝对性权利设置缺失导致数据权利保护力度不足；其次，过于依赖“契约自治”的无为而治路径，导致专门的数据交易规则未能及时被纳入立法计划；再次，倚重私法规制导致不当忽视了公法与消费者法规制数据交易的重要性等问题。数据交易规则的不完善一定程度上阻碍了大数据交易产业的发展，影响了数据交易过程中对个人信息的保护，亟需探讨完善其规制路径。 本文主要运用了经济分析研究方法和比较研究方法对数据交易过程中的相关法律问题进行研究，同时结合语义分析和实证分析的方法探讨数据权利属性的认定、数据权利的归属、数据交易规则的设计以及数据交易环境下的个人信息保护机制。 在现有民法理论体系无法全面准确界定数据权利法律属性并对其进行科学合理规范和保护的现实背景下，应考虑结合数据权利的双向性与数据经济作为整体上的财产利益的特性，构建新的数据权利体系。具体来说，数据权利体系应包括用户基于个人信息产生的数据权利和数据经营者基于数据资产产生的数据权利，其中前者具体包括数据人身权和数据财产权，后者具体包括数据经营权和数据资产权。 同时，应以促进数据交易市场发展为整体目标导向来进行数据交易规则的构建，恪守流动性、稳定性、透明性的要求来构建以公开公平公正、个人数据保护、责任与风险共担为基本原则的数据交易制度。构筑“静”的安全，推动数据绝对性权利的法定化，形成权利体系基础；强化“动”的安全，构建立法层面的专门数据交易规则，统一适用于大数据交易平台及数据交易当事人。在此基础上，从准入规则和交易行为规则两方面出发对数据交易活动进行规制，辅之以数据交易登记管理规则、数据交易资金结算规则、数据交易传输交付规则等数据交易的配套制度。此外，应明确数据交易中可能产生的违约责任、侵权责任及其相应的责任认定机制。 基于以上设计思路，本文尝试形成比较完善的数据交易的民事规则，以更好地平衡数据利用与保护的关系，更好地实现数据资源的最优配置和数据的有益流通，保障数据交易的合法、稳定、和谐和有序。 关键词 大数据，数据权利，数据交易，个人信息保护

 With the rise of new information industry technology such as cloud computing and Internet of things, the rapid development of data industry is triggering a change in the way of thinking and social form, which has a comprehensive and profound impact on modern society. At the same time, since 2010, along with the central and local policies on promoting the development of the big data industry, the data transaction market is also growing and the data transaction is becoming an important industry with hidden depth value. In recent years, while the scale of data transactions in China has been expanding, the legislation and research on data are relatively lagging behind, and it is unable to adapt to the pace of data transaction development. As a result, the current data transactions in China are facing issues like imperfect standards for access to transactions, unclear data ownership, unclear trading targets, lack of trading pricing mechanisms, and insufficient protection of personal information. This not only affects the further development of data transaction, but also is not conducive to the protection of personal information in the process of data transaction. Specifically, from the point of view of the subject and object of data transaction, there is no clear legal norm to adjust the attribute and attribution of the right on the data. The data itself has the characteristics of openness, sharing and intangibles, in addition, it still has the characteristics of too high cost of maintenance exclusivity, no inevitable transfer of ownership of transactions, and the influence of the relativity of creditor's rights, which determines that the data cannot be included in the current adjustment category of real rights, intellectual property rights and claims. Accurately define the legal attributes of data rights. At the same time, the attribution of rights in the data itself is uncertain. In legal relations relating to data, there is no uniform answer in the current legal framework as to what rights the participants can claim and by whom to claim them. As far as the related rules of behavior of data transaction are concerned, there is a lack of uniform rules of data transaction related behavior at the current legislative level in China. The current rules of data transaction are mainly dominated by big data trading platform, there are some differences in the trading rules of different platforms, and the rules are difficult to fully fit the characteristics of data transaction, trading methods and transaction pricing and other core rules cannot solve the real problem very well. Specific to the personal information protection mechanism of data transaction process, the existing rules that start late, distribute scattered, with general content and relatively low level of effectiveness, is also urgent to improve. From the perspective of comparative law, compared with the United States, Germany and the European Union, China′s data transaction legal regulation system mainly has the following problems. Firstly, the lack of data absolute rights setting leads to insufficient protection of data rights. Secondly, too much reliance on the institutional governance path of "contract autonomy" leads to the failure of special data transaction rules to be incorporated into the legislative plan in time. Thirdly, relying on private regulations improperly ignore the importance of public law and consumer regulations data transactions. The imperfection of data transaction rules hinders the development of big data transaction industry to a certain extent, affects the protection of personal information in the process of data transaction, and needs to explore and improve its regulatory path. This paper mainly uses economic analysis research methods and comparative research methods to study related legal issues in the process of data transaction. At the same time, it combines semantic analysis and empirical analysis to explore the identification of data rights attributes, the attribution of data rights, and the design of data transaction rules and personal information protection mechanisms in the data transaction environment. In the context of the existing civil law theory system that cannot fully and accurately define the legal rights of data rights and scientifically rationalize and protect them, we should consider combining the two-way nature of data rights with the characteristics of data economy as a whole property interest and construct new Data rights system. Specifically, the data rights system should include data rights generated by users based on personal information and data rights generated by data operators based on data assets. The former includes data personal rights and data property rights, and the latter specifically includes data management rights and data asset rights. At the same time, we should promote the development of data transaction market as the overall goal orientation to build the data transaction rules, adhere to the requirements of liquidity, stability and transparency to build a data transaction system with open fairness and fairness, personal data protection, responsibility and risk sharing as the basic principles. Construct the security of "static", promote the legalization of the absolute right of data, form the basis of the right system, strengthen the security of "dynamic", construct the special data transaction rules at the legislative level, and apply uniformly to the parties of big data trading platform and data transaction. On this basis, the data transaction activities are regulated from two aspects of access rules and transaction behavior rules, supplemented by data transaction registration management rules, data transaction funds settlement rules, data transaction transmission delivery rules and other data transaction supporting system. In addition, we should clarify the liability for breach of contract, tort liability and corresponding liability determination mechanism that may arise in data transaction. Based on the above design ideas, this paper attempts to form a relatively perfect civil rules of data trading, in order to better balance the relationship between data utilization and protection, to better achieve the optimal allocation of data resources and the beneficial circulation of data, to ensure the legal, stable, harmonious and orderly data transactions. KEY WORDS big data, data rights, data transaction, personal information protection