论数据犯罪的立法重塑

当前《刑法》所规定的数据犯罪主要源于前数字经济时代,所保护的数据类型及对侵害行为的规制皆无法适应数字经济时代的发展需要,对既有规范的刑法解释亦无法实现对数据法益的妥善保护,立法断层与司法瓶颈并存。数据分类分级保护制度为刑法介入数据保护划定了合理界限,值得刑法保护的数据应被限定为《数据安全法》等前置法所特别保护的重要数据,一般数据不宜过早地被纳入刑法保护范畴。承载私法益的个人数据和企业数据能够通过《刑法》所确立的关联犯罪得到妥善保护,没有必要通过增设新罪予以重复保护。基于对数据犯罪立法的体系性考察,建议增设非法处理重要数据罪,以衔接《数据安全法》等,弥补对关乎国家安全、公共利益的重要数据的保护空隙,同时对侵犯公民个人信息罪进行必要的立法扩容,以回应实现全流程规制非法处理个人信息数据行为的实践期待。

The current criminal law provisions on data crime and regulation mainly originates from the pre-digital economy era,which can not meet the needs of the digital economy era.The data legal interest can not be protected properly through the criminal law interpretation of related crimes.There are both the legislative gap and the judicial bottleneck.The system of data classification and hierarchy has delineated a reasonable limit for criminal law to intervene in data protection.The data worthy of being protected by criminal law should be limited to the data specially protected by the Data Security Law and other pre-laws,and general data should not be included in the scope of criminal law protection prematurely.Personal data and enterprise data bearing private legal interests can be properly protected through the related crimes established by the criminal law,and there is no need to duplicate the protection by adding new provisions.With the Data Security Law,the criminal law should add the crime of illegal processing of important data based on the systematic investigation of data crime legislation,so as to bridge the gap in the protection of important data related to national security and public interests.At the same time,making necessary legislative expansion of infringement of citizens'personal information in order to respond to the practical expectation of realizing the whole process of regulating the illegal processing of personal information data.