我国人脸识别技术风险之刑法应对

Criminal Law Response to the Risks of Face Recognition Technology in China

人脸识别技术的应用具有双重面向,其在网络空间内的大规模推广催生了一条组织严密、分工明确的犯罪黑色产业链。现行刑法主要存在以下规制困境:一是侵犯公民个人信息罪的适用困难;二是理论与实务对破解人脸验证行为的定罪存在分歧;三是非法使用人脸信息的规制缺位。对此,应当从人脸识别犯罪产业链的各环节入手,非法收集行为应通过实质解释将人脸信息归为“公民个人信息”,进而适用侵犯公民个人信息罪的相关规定。破解人脸验证并未破坏数据和系统安全,应构成非法控制计算机系统罪。非法使用行为需结合行为性质与用途具体判断,确定相应罪名。

The application of face recognition technology has a dual orientation,and its large-scale promotion in cyberspace has given rise to a well-organized and clearly-defined criminal black industry chain.The following regulatory dilemmas exist in the current criminal law:first,the difficulty of applying the crime of infringing citizens’personal information;second,the divergence between theory and practice on the conviction of cracking face verification behavior;third,the lack of regulation of illegal use of face information.In this regard,we should start from each link of the face recognition crime industry chain,and the illegal collection behavior should be classified as"citizens’personal information"through substantive interpretation,and then apply the relevant provisions of the crime of infringing citizens’personal information.Deciphering face verification does not damage data and system security,and should constitute the crime of illegal control of computer systems.Illegal use should be judged in conjunction with the nature and use of the act to determine the corresponding crime.