本文从立法、司法和社会三个方面对个人信息保护的现状进行探究,对个人信息的分类保护标准进一步探讨。我们认为个人信息应该严格区分直接和间接个人信息、隐私和非隐私个人信息,并根据两类信息的价值和安全风险进行分级别保护。 This article explores the status quo of personal information protection from the aspects of legislation, judicature and society, and further discusses the criteria for the classification and protection of personal information. We think personal information should strictly distinguish between direct and indirect personal information, private information and non-private information, and should be classified according to the value and security risk of the two kinds of information.