受限、契合与独立:论刑事诉讼数据处理原则

Restriction,Conformity and Independence:On the Principles of Data Processing in Criminal Procedures

《中华人民共和国个人信息保护法》在个人信息处理原则方面借鉴了《一般数据保护条例》的相关内容,但在刑事诉讼领域却没有建立类似欧盟《个人数据刑事司法指令》的相关规范。处理个人数据时,不能将普通的数据处理原则照搬到刑事诉讼中来。基于刑事诉讼活动的特殊性,与自然限制的公开、透明原则,存储限制原则和知情同意原则相比,合法、正当、必要原则以及保障安全和质量原则与刑事诉讼更能自然契合。更进一步地,数据处理的目的限制原则、数据最小化原则及准确性原则则能够在刑事诉讼进程中发挥关键性独立作用。

Personal Information Protection Law of the People’s Republic of China draws on the relevant content of the General Data Protection Regulation(GDPR)in terms of principles concerning the processing of personal information,but it does not establish the norms similar to the European Union’s criminal justice directives in the field of criminal procedures.The principles of processing ordinary data cannot be applied directly to criminal procedures.Considering the particularity of criminal proceedings,the principles of lawfulness,legitimacy,necessity,as well as the principles of safeguarding safety and quality are compatible with criminal procedures in comparison with the naturally limited principles of openness and transparency,the principle of storage limitation and the principle of informed consent.Furthermore,the principles of purpose limitation,data minimization and accuracy of data processing can play a key and independent role in criminal procedures.