发表机构
Vienna University of Economics and Business; IT:U Interdisciplinary Transformation University Austria; Delft University of Technology（维也纳经济大学; IT:U奥地利跨学科转型大学; 代尔夫特理工大学）
机构由 AI 辅助整理，请以论文原文为准。AI 中文总结
该论文针对数字权利难以通过信息系统行使的问题，提出人机兼容的权利层理论，推导7项规范要求，探讨从横幅合规转向权利支持型数字基础设施的路径。
AI 中文摘要
数字权利日益存在于法律中，但通过作为媒介的信息系统行使却十分困难。这篇批判性概念信息系统（IS）论文通过严谨的概念综合与问题界定，解释了法律异质性、组织与商业激励冲突、架构碎片化及权利相关行为的不对称控制之间的相互作用如何造成这一差距。随后，该论文提出了一种人机兼容的权利层理论：这是一种受管控的社会技术能力，用于标准化、机器可读、双向且司法辖区多元的请求、同意、拒绝、撤回、异议、记录及支持的通信。通过对比加州式的选择退出信号、欧盟混合合法基础制度，以及P3P、DNT、GPC和ADPC，该论文推导出7项规范性要求，将“按架构赋权”作为有限的解放性政策论点，还将拟议的GDPR关于自动化和机器可读隐私管理的条款作为政策案例，探讨如何从基于横幅的合规转向支持权利的数字基础设施。
英文摘要
Digital rights increasingly exist in law but remain difficult to exercise through the information systems that mediate them. Using disciplined conceptual synthesis and problematization, this critical-conceptual IS paper explains the gap through the interaction of legal heterogeneity, conflicting organizational and commercial incentives, fragmented architectures, and asymmetrical control over rights-relevant acts. It then theorizes a human-compatible rights layer: a governed sociotechnical capability for standardized, machine-readable, bidirectional, and jurisdictionally plural communication of requests, consent, refusal, withdrawal, objection, records, and support. Comparing California-style opt-out signals, the EU's mixed lawful-basis regime, and P3P, DNT, GPC, and ADPC, the paper derives seven normative requirements, develops rights by architecture as a bounded emancipatory policy argument, and treats a proposed GDPR provision on automated and machine-readable privacy management as a policy case for moving from banner-based compliance toward rights-supporting digital infrastructure.
