Editor’s Note — DCC.
Ai Lin’s piece in 《政治与法律》(Political Science and Law) takes the operational reality of platform-economy work — couriers tracked minute-by-minute by algorithms, drivers penalized for deviating from optimal routes, workers whose physical labor is shaped by software — and asks the question PIPL doesn’t answer: what does individual- consent-based PI protection mean when the “individual” has no realistic alternative to consent? Ai’s framework draws on labor-law doctrine (tilt protection for the structurally weaker party) and on contextual-integrity theory (consent must be evaluated within the power relation it occurs in), to argue for a hybrid PI-and-labor regime for platform gig workers. The piece is relevant for any multinational running platform models in China — including e-commerce platforms with contractor delivery, ride-hail expansion, and the broader category of “internet-employed professionals” (网约配送员 / 网约车驾驶员 / 货车司机 / 互联网营销师).
The structural problem
China’s “new employment form” (新就业形态) — gig workers operating through platforms — has grown into one of the most consequential labor categories. The PI dimension is what makes it distinctive from earlier gig-economy analyses: every gig worker’s labor process is algorithmically observed and algorithmically directed, generating continuous PI flows.
PIPL’s baseline approach assumes the individual is a knowing consent-grantor with realistic alternatives. Both assumptions break down in the platform-gig context:
- Worker has no realistic alternative to consent. Joining a platform requires clicking “agree” to extensive PI collection — location, route, behavior, biometric, sometimes more. Refusing means no work.
- Worker has no meaningful negotiation power. A single worker can’t bargain with the platform over what’s collected or how it’s processed. Individual contractual remedies are practically unavailable.
PIPL Article 13 (consent baseline), Article 14 (consent requirements), Article 15 (revocation right), and Article 24 (automated decision-making transparency) all assume a degree of individual leverage the platform context strips away. The Civil Code’s Article 1035 consent requirement similarly assumes a baseline that gig work doesn’t provide.
Ai’s diagnosis: PIPL is structurally designed for vertical PI-protection relationships (subject ↔ processor) and fails to account for the structural-asymmetry that defines the platform-gig context.
The conceptual frame — alienated labor + scenario fairness
Ai’s analytical move imports two frameworks.
The alienated-labor frame
Marx’s 1844 framework of labor alienation (异化劳动) maps surprisingly well onto platform-gig work, in three respects:
(1) Alienation of worker from product. Platform algorithms set delivery time based on previous workers’ performance, then punish deviation. As workers compete to set faster times, the “fastest extreme” gets absorbed into the algorithm’s expectations, displacing the previously normal pace. The worker’s contribution shapes the algorithm against itself.
(2) Alienation of worker from labor process. The worker’s location, movement, and behavior are continuously monitored. Deviation from the platform’s algorithmically-determined optimal route triggers penalty. Worker autonomy over the labor process is mostly nominal.
(3) Alienation of worker from the platform. The platform’s ownership of the information infrastructure — not the worker’s tools (vehicle, phone) — is the dominant means of production in the gig economy. The platform’s information control is its labor-control mechanism.
The framework justifies treating platform-PI processing not as a neutral consent transaction but as the primary mechanism through which a structurally asymmetric employment relation operates.
The scenario-fairness frame
The “scenario fairness” (场景公正) principle requires PI protection to be evaluated in the specific context where the data flow occurs — not against a generic consent baseline. Privacy theorist Helen Nissenbaum’s contextual integrity framework is the underlying reference.
Application: in the platform-gig context, the relevant context is employment-equivalent, not consumer-equivalent. PIPL’s consumer-equivalent baseline (full individual consent, unilateral revocation) is the wrong framework. The right framework is employment-tilted protection — closer to labor law’s structural recognition that the employer holds the bargaining advantage and the law must compensate.
The legal-status question
A central debate Ai addresses: are platform gig workers employees (subject to traditional labor law) or independent contractors (subject only to commercial law)? Ai’s answer: it doesn’t matter for PI protection purposes — even where formal employment status is absent, the economic-dependence factor that justifies labor-law tilt protection is fully present.
The court precedent Ai cites: a court found a platform delivery worker had:
- Labor that was an integral component of the platform’s business
- Payment calculated on completed-work-quantity basis
- No decision-making authority over labor pricing or terms
- Income from the platform as the primary livelihood source
This established economic dependence sufficient to support tilt protection, even though formal employment relationship status was disputed.
The doctrinal implication: PI protection for platform gig workers should apply tilt protection irrespective of formal employment status. The structural-asymmetry justifying tilt is present in any case; binding the doctrine to formal employment classification produces under-protection in the cases where it’s most needed.
The three operational responses
Ai proposes three integrated responses.
Response 1 — Enhanced transparency + tiered PI safeguards
The traditional PI-protection toolkit (transparency requirements, sensitivity-based handling) needs to be intensified in the platform-gig context.
Transparency. Platform-gig workers should have explicit visibility into what PI is being collected, how it’s being processed, and how algorithmic decisions are made. The current model — where workers click “agree” to a generic privacy policy without genuine notice — does not satisfy PIPL’s transparency principles when applied with structural-asymmetry-awareness.
Tiered safeguards. Different categories of platform-collected worker PI carry different harm potential and should have different protection levels. Real-time location data, biometric data, and behavioral pattern data warrant the highest tier; basic identity data warrants standard tier. The platform’s processing decisions should be tier-calibrated.
Response 2 — Algorithmic rules as workplace regulations subject to collective bargaining
This is Ai’s most operationally novel contribution. The argument: the platform’s algorithmic processing rules function — practically — as workplace regulations. They determine work allocation, work pace, work evaluation, and effectively work compensation. They should be:
- Disclosed under the same regime as formal workplace regulations
- Subject to procedural review before deployment or material change
- Negotiable through collective representation of the platform’s worker community
- Modifiable through bargaining rather than only through platform-unilateral revision
In effect: import labor law’s collective-bargaining structure into the PI-and-algorithmic-management context. The structural argument: individual consent doesn’t work; collective negotiation is the only realistic mechanism for genuine worker input into the algorithmic rules that shape their work.
Practically, this would require either:
- A new statutory framework recognizing platform-worker collective entities for PI / algorithmic-rule negotiation purposes
- Reading existing labor-law collective-bargaining structures into the platform-gig context by analogy
- A regulatory rule (e.g., from CAC or MIIT) requiring platforms to disclose algorithmic rules and accept consultation processes
Response 3 — Full-process regulatory accountability
The current PI enforcement regime focuses on collection-stage consent. For platform gig workers, the practically consequential decisions happen at the processing and decision-making stages — what the algorithm does with the data, what penalties it imposes, what behavioral incentives it creates.
Ai proposes regulatory accountability across the full data lifecycle:
- Collection stage — verified disclosure and consent; tiered handling for sensitive categories.
- Processing stage — algorithmic decision-making transparency; pre-deployment review for material algorithmic changes; auditable processing logs.
- Decision-stage — appealable algorithmic decisions; human-review channel for adverse outcomes; remediation pathway when algorithmic decisions cause economic harm.
The proposed mechanism: integrate this into the existing PI Audit framework (the PI Audit Measures) and the algorithmic-recommendation rules, with platform-gig contexts treated as high-priority audit categories.
What this tells overseas compliance teams
-
Platform-gig PI is a high-priority sub-regime now. Multinationals running platform models in China — food delivery, ride-hail, freight, last-mile logistics, online services where contractors operate through platform apps — should not assume the consumer-PI framework applies cleanly. The doctrinal and regulatory framework is moving toward employment-tilted protection.
-
Individual-consent compliance is structurally insufficient. Multinationals can no longer rely on PIPL-style individual consent as the operating PI baseline for platform gig workers. Expect rulemaking, enforcement, and litigation to begin imposing collective-consideration, structural-fairness, and tiered-safeguard expectations even where the formal employment relationship is disputed.
-
Algorithmic management transparency will become a compliance baseline. Where your platform model uses algorithmic work allocation, pacing, or evaluation that affects gig workers’ compensation, expect to face increasing requirements to (a) disclose the algorithmic rules, (b) provide notice of material changes, (c) accept consultation channels with the worker community, (d) provide appealable decision review. Build these into the compliance program now rather than retrofitting.
-
The PI Audit Measures are the operational lever. Where regulators want to enforce against under-protected platform-gig PI handling, the PI Audit Measures provide the direct authority. Multinationals should expect platform-gig PI to become a recurring audit-focus area; the audit program should specifically address PI handling for non-employee workers.
-
Sectoral rulemaking is the likely vehicle. The PI-and-algorithmic-management protection regime for platform workers will most plausibly arrive through (a) CAC algorithmic-management rule revisions, (b) MIIT app-compliance bulletins targeting algorithmic-worker-management practices, (c) Ministry of Human Resources and Social Security guidance on new-employment-form labor protection. Watch all three vectors.
The structural shift Ai signals: Chinese data law is starting to recognize that PIPL’s consumer-equivalent framework cannot govern employment-equivalent contexts. The doctrinal layer is articulating the framework now; the rulemaking layer will follow within 12-24 months. Multinationals operating platform models that touch Chinese workers — direct or indirect — should design for the future PI-and-labor-tilted regime, not the current PI-only baseline.
— 艾琳, 平台用工中个人信息保护的困境表现与规则回应 (The Difficulties and Rule Responses for Personal Information Protection in Platform Employment), 《政治与法律》(Political Science and Law), Issue 3, 2026; reposted via 数字经济与法治 WeChat Official Account, May 7, 2026. Original article (Chinese).
Not legal advice. The above is DCC’s structured summary of Ai’s analysis, with framing for overseas counsel; the alienated-labor framework, the scenario-fairness application, and the three-response operational framework are Ai’s.