疫情防控背景下个人信息的刑法保护及边界

Criminal Law Protection and Boundary of Personal Information in the Context of Epidemic Prevention and Control

疫情防控时期如何处理信息安全和信息利用之间的冲突,成为横亘在学术界和实务部门面前的难题。涉疫情个人信息兼具公开性与私人性、个人法益和公共法益,具有半公开、复合法益的特征。信息自由与信息安全既对立又统一,应当适用比例原则寻求二者之间的价值平衡。涉个人信息行为入罪时,应当将侵犯公民个人信息罪理解为危险犯;分级保护个人一般信息和个人敏感信息;收集行为的刑事违法性以行政违法性和民事违法性为前提。将信息主体知情同意、信息控制者合法使用和去识别化处理作为出罪化事由。

Dealing with the conflict between information security and information utilization has become a problem for academia and practical departments during the epidemic prevention and control period.The personal information involved in the epidemic has both publicity and privateness,and has the characteristics of semi-public and compound legal interests.Freedom of information and information security are both opposed and unified,and the principle of proportionality should be applied to seek a value balance between the two.When an activity involving personal information is convicted,the crime of infringing on citizens personal information should be understood as a dangerous offender;general personal information and sensitive personal information should be protected hierarchically;the criminal illegality of the collection behavior is premised on administrative illegality and civil illegality.The informed consent of the information subject,the legal use of the information controller and the de-identification process shall be the reasons for criminalization.