Abstract: There are two types of rights for those databases that take personal data as their direct object， i.e.， database rights and data subjects' rights. To the former， its core is property interests， and to the latter， its core is human dignity and personality interests. These two kinds of rights are always conflicting in database development and application， represented by such cases that personal sensitive data are illegally collected and utilized， and citizens are surrounded and monitored by ubiquitous data. However， modern civilization is moving towards respecting and protecting privacy rights; accordingly， data integration and data mining cannot be achieved by sacrificing personal privacy rights. Database development and application should respect the fundamental privacy rights of data subjects， and relevant protection laws should be set from such aspects as data classification， data processing behavior and data controllers' responsibility.

Key words: database, privacy right, right of informed consent, right to be forgotten, database controller's responsibility