我国《个人信息保护法》第13条引入的“在合理范围内处理个人自行公开或其他已经合法公开的个人信息”合法性基础，成为便捷个人信息处理的可选路径之一。对已经公开的个人信息的进行处理无需取得个人信息主体同意已然成为共识，因而由该合法法性基础产生的可能个人信息自主控制的担忧，转化为对“公开”以及“合理使用”的解释和限定。从《个人信息保护法》中已经无法再获得更为详细的阐释，且司法裁判中也尚未形成代表性案例。故亟需对“公开”及“合理使用”进行统一、明确的解释，以在行政执法与司法审判中形成统一标准，进而有效提升法律适用的可预期性。本文提出，能够在合理范围内处理的已公开个人信息是指已经过合法公开披露的能够被社会或不特定第三方所处理的个人信息，根据合法性来源不同可以划分为个人自行公开或授权公开和第三方依法公开两类，两者在适用时具有一定差别。个人信息应同时具有公开性与来源合法性才能被合理使用，合理使用并非没有边界，在判断是否构成合理使用时应当从综合考量权衡多种因素，具体分析目的是否妥当、使用是否有助于实现目的、使用是否在必要范围内、使用对信息主体的潜在影响等四项因素，进而对针对已公开个人信息的处理能否构成合理使用做出最终判断。本文认为应当设置尽可能明确的合理使用判断标准，以为个人信息处理者和信息主体提供尽可能明确的法律预期，以避免寒蝉效应和“反公地悲剧”。同时，合理使用并不意味着个人信息处理者其他义务的免除，个人信息处理者应尽对个人信息公开性和来源合法性审查的注意义务，履行对信息主体的告知义务，在特殊场景下处理已公开个人信息时仍需取得信息主体的单独同意。当信息主体表示明确拒绝时即构成对已公开个人信息合理使用的排除适用。

Article 13 of Personal Information Protection Law of the People's Republic of China includes the legality basis of "the personal information disclosed by the individual himself or other legally disclosed personal information of the individual is reasonably processed in accordance with this Law", which is an exemption for the consent of the information subject, and the processor of personal information can handle the disclosed personal information without obtaining the consent of the information subject. Publicly available personal information that can be handled within a reasonable range refers to personal information that has been legally disclosed publicly and can be handled by society or unspecified third parties, and can be divided into two categories according to the different sources of legality: disclosure by individuals or authorized disclosure and disclosure by third parties in accordance with the law, with certain differences in the application of the two. In order for personal information to be used reasonably, it must be disclosed and the source must be legal. In determining whether the use of personal information constitutes a reasonable use, a comprehensive analysis should be made of four factors, including whether the purpose is appropriate, whether the use helps to achieve the purpose, whether the use is within the necessary scope, and the potential impact of the use on the subject of the information, in order to make a final judgment on whether the handling of personal information that has been disclosed The final judgment is made on whether the processing of disclosed personal information constitutes reasonable use. In this paper, we believe that we should set up as clear a standard for judging fair use as possible, so as to provide as clear a legal expectation as possible for personal information processors and information subjects. At the same time, the reasonable use does not mean that the personal information processor is exempted from other obligations, and the personal information processor should do its duty of care in the review of the openness and legality of the source of personal information. When the information subject expressly refuses to do so, this shall constitute an exclusion of the application of reasonable use of the disclosed personal information.