互联网企业个人信息泄露的刑法规制路径探寻——以拒不履行信息网络安全管理义务罪的激活为视角

Exploring Criminal Law to Regulate Internet Companies in Disclosing Personal Information——Perspective of Activating Crime of Failing to Fulfill Obligation of Network-Based Information Security Management

个人信息保护刑法规制存在如下问题:第一,拒不履行信息网络安全管理义务罪的保护目的不明确;第二,该罪的安全保护义务范围不清;第三,单位内控制度构建不足。要达到增强对个人信息刑法保护的目的,需要通过澄清拒不履行信息网络安全管理义务罪的法益兼具社会属性与人身属性,辅助判断犯罪构成以及筛选前置法中的保护义务;再通过改变单位犯罪归责模式引入刑事合规,达到督促单位承担个人信息保护义务的目的。

In exploring the Criminal Law to better protect personal online information,there have been some problems.First,it is not clear what purpose the crime of refusing to fulfill the obligation of information network security management serves.Second,the scope of the duty of safety protection of this crime is unclear.Third,the construction of internal control system is insufficient.In order to enhance the protection of personal information in criminal law,it is necessary to clarify that the legal interest of the crime of refusing to fulfill the obligation of information network security management has both social attribute and personal attribute.In addition,changing the imputation mode of unit crime and introducing criminal compliance shall result in goal of urging the unit to undertake the obligation of personal information protection.