This paper examines the civil law framework for protecting personal information in China’s big data context. It analyzes current legislation, including the Civil Code and Personal Information Protection Law, highlighting persistent challenges such as ambiguous rights attribution and inadequate enforcement mechanisms. The study proposes concrete improvements, including clarifying personal information rights, refining processing principles, establishing differentiated liability systems, and enhancing public interest litigation. These recommendations aim to balance effective protection with the legitimate utilization of data resources.