数据安全犯罪的迭代异化与刑法规制路径——以刑事合规计划的引入为视角

Iterative Alienation of Data Security Crimes and the Path of Criminal Regulation System:From the Perspective of the Introduction of Criminal Compliance Program

随着侵犯公民个人信息犯罪的迭代异化,司法解释不断丰富侵犯公民个人信息罪的行为类型和个人信息外延,但面临个人信息犯罪严峻的异化态势,受侵害的数据质量、数据规模、危害性后果不断攀升,数据的处理、共享、交易、流通使得数据的“动态安全”逐渐成为数据安全问题的常态。以刑事制裁为主的单向度的国家监管显然存在较大的局限性,规制手段的单一化使其规制效果难彰,因此需要其他手段的功能补给。刑事合规制度作为一种能够容纳企业与国家共治的犯罪治理模式,通过促进网络服务商数据安全保障工作的内控化、制度化开展,增强网络服务商对于数据安全的责任意识,通过网络服务商的事前的主动介入,增强数据安全犯罪的积极防控,实现侵害数据安全犯罪的积极的一般性预防。

With the continuous iterative alienation of the crime of infringing citizens’personal information,judicial interpretation constantly enriches the types of behaviors and personal information extensions of crimes against citizens’personal information.But facing the severe alienation of personal information crimes,the quality of data infringed,the scale of data and harmful consequences continue to rise.In the meantime,the processing,sharing,trading,and circulation of data make the“dynamic security”of data gradually become the norm of data security issues.The one-dimensional state supervision based on criminal sanctions obviously has a large limitation.The simplification of the regulation means makes its regulation effect difficultly,so it needs the function replenishment of other means.As a criminal governance model that can accommodate enterprises and the state,the criminal compliance system enhances the network service provider’s sense of responsibility for data security by promoting the internal control and institutionalization of data security services for network service providers.With the proactive intervention of the business beforehand,the criminal compliance system enhances the active prevention and control of data security crimes and achieves a positive general prevention of data security crimes.