APP违法违规收集使用个人信息的刑事责任边界

The boundary of criminal liability for APP illegal collection and use of personal information

APP违法违规收集使用个人信息的有效治理需要刑法与其他部门法形成合力。从APP服务提供者违法违规态势看,其实施的积极行为是侵犯公民个人信息罪的关注对象;从行业发展形势看,APP的用户协议与隐私政策体现出个人信息收集使用的行业实践规则。侵犯公民个人信息罪,在打击利用个人信息本身获得非法利益之恶意行为的同时,应被用以促进APP服务提供者实施合规计划。在刑事责任阻却上,一方面刑事合规应当成为APP侵犯个人信息入罪的阻却事由,另一方面结合行业实践规则,应基于信息自决权限缩APP违法违规收集使用个人信息的入罪边界。

The effective governance of APP's illegal collection and use of personal information requires a joint force between the criminal law and other departmental laws.Judging from the violations of laws and regulations by APP service providers,the active behaviors they implement are the targets of the crime of infringing on citizens'personal information;from the perspective of industry development,APP's user agreements and privacy policies reflect the industry practice rules for the collection and use of personal information.The crime of infringing citizens'personal information should be used to promote APP service providers to implement compliance plans while combating malicious behaviors that use personal information to obtain illegal benefits.Regarding the prevention of criminal liability,on the one hand,criminal compliance should be the reason for preventing the app from infringing on personal information;on the other hand,combined with industry practice rules,it should be based on the information selfdetermination authority to reduce the criminal boundary of the app’s illegal collection and use of personal information.