滥用网络爬虫技术收集个人信息的刑法规制

Criminal Law Regulation of Abusing Web Crawler Technology to Collect Personal Information

随着网络爬虫技术的信息收集能力不断提升,其在被滥用时所造成的损失日益严重。认定"非法收集"个人信息,不仅应考察方法本身是否具有非法性质,还应考察收集信息的依据或资格。对突破反爬虫技术措施收集个人信息的行为,应根据法条之间的竞合关系,适用侵犯公民个人信息罪。对正常登录系统收集个人信息的行为,应考察收集行为是否出于履职的必要。对收集网站外部访问者的个人信息的行为,应根据网站功能、浏览内容确定信息的收集权限。

With the continuous improvement of information collection ability of web crawler technology, the loss caused by its abuse is increasingly serious. To identify "illegal collection" of personal information, we should examine not only whether the method itself is illegal, but also the basis or qualification of information collection. When breaking through the anti-crawler technical measures to collect personal information, according to the concurrence relation between articles of criminal law, the crime of infringing on citizens’ personal information should be applied to. When logging into the system normally to collect personal information, we should check whether the collection behavior is necessary for the performance of duties. When collecting the personal information of the external visitors of the website, the authority of information collection should be determined according to the website function and browsing content.