论敏感信息二元同意规则的刑法构造

On the Criminal Law Structure of the Dual Consent Rule of Sensitive Information

刑法中针对敏感信息建构同意规则的突破口在于《个人信息保护法》第32条的规定。敏感信息二元同意规则的刑法构造具备理论根据和现实基础。二元同意规则以对信息法益属性的准确厘定为前提,在信息分类的基础上通过结合一般恐惧理论对敏感信息敏感等级进行划分,最终得出针对敏感程度极高的敏感信息同意无效的结论。刑法对于高度敏感信息同意无效的情形还涉及到后续保障问题的探讨,这又可以细分为司法及立法上的双重启示。司法上的启示主要以对《刑法》第253条之一“情节严重”的解释为切入点,即对侵犯高度敏感信息行为“情节严重”的入罪判断不应当再局限于“量”的标准。立法上的启示主要以侵犯个人信息的“行为”为切入点,以《个人信息保护法》为参照进一步细化刑法中侵犯公民个人信息的行为方式,最终拟提出增设“滥用公民个人信息罪”的构想。

The breakthrough of constructing consent rule for sensitive information in criminal law lies in the provision of Article 32 of Personal Information Protection Law.The criminal law structure of sensitive information dual consent rule has both theoretical basis and practical basis.The dual consent rule is based on the accurate determination of the legal interest attribute of information.On the basis of information classification,the sensitive levels of sensitive information are classified by combining the general fear theory,and has finally been drawn the conclusion that consent for highly sensitive information is invalid.The invalidity of consent for highly sensitive information in criminal law also involves the discussion of follow-up security issues,which can be subdivided into dual enlightenment in judicial and legislative aspects.The judicial enlightenment is mainly based on the interpretation of“serious circumstances”in Article 253 of the Criminal Law,that is,the conviction of serious violations of highly sensitive information should no longer be limited to the standard of“quantity”.The legislative enlightenment mainly starts with the“act”of infringing personal information,further refines the act of infringing citizens’personal information in the criminal law in accordance with Personal Information Protection Law,and finally proposes the concept of adding“the crime of abusing citizens’personal information”.