Abstract: In the information and internet society,personal medical information has a high commercial value and it should be protected strictly under the law of personal information protection.However,we also should be cautious about the extent of the protection for such sensitive information.On the one hand,the patients’ personal medical information should be protected properly;on the other hand,the protection system of personal information should ensure the smooth development of the public health services and advances in medical research.It is a better choice to refer to the principles of the OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data to determine their boundary.

Key words: personal medical information, legal protection