论人脸识别刑法规制的限度与适用——以侵犯公民个人信息罪指导案例为切入

On the Limits and Application of Criminal Regulation of Facial Recognition:From the Perspective of the Guiding Cases on the Crime of Infringing on Citizens'Personal Information

如果国家无意用刑法手段规制公权力组织滥用人脸识别的现象,那么从刑法面前人人平等的原则出发,对于个人滥用人脸识别的行为就必须慎用刑事制裁措施。法秩序统一性原理主要强调的是刑法的补充性,它必须受制于刑法的独立性。侵犯公民个人信息罪是通过保护公民的个人信息来捍卫信息所承载的人身、财产权利。它是一种具体危险犯,只有对人脸等个人信息的侵犯足以危及人身、财产权利,才可以发动刑罚权。单独的人脸信息如果没有姓名等其他信息,很难对自然人的人身、财产权利造成实质损害。在涉及人脸识别的相关犯罪中,侵犯公民个人信息罪与计算机犯罪、网络犯罪、财产犯罪都不能进行数罪并罚。通过人脸识别骗取财物,机器不能被骗的理论应当被扬弃。法治必须对数据利维坦保持足够的警惕,对人脸识别的规制主要依赖于其他法律体系的治理,刑法应该保持必要的谦抑与节制。

If the State does not intend to regulate the abuse of facial recognition by public authorities through penal legislation,the principle of equality before the criminal law demands a cautious deployment of criminal sanctions for individuals'abuse of such technology.The doctrine of the unity of legal order underscores the supplementary nature of criminal law,though which must be subject to the autonomy of criminal law.As a specific dangerous crime,the infringement of personal information,including facial data,must imperil personal and proprietary rights to trigger the exercise of punitive powers,since it aims to safeguard the personal and proprietary interests inherent in citizen's information.In the absence of other information beyond facial data such as name,it is difficult to cause substantial harm to natural persons'personal and property rights.Offences involving facial recognition dictate against concurrent punishment with the related computer,network,or property crimes,and the notion that machines cannot be deceived in fraudulently obtaining assets through facial recognition is invalid.The rule of law must mandate adequate vigilance against data leviathan,but the regulation of facial recognition technology is contingent upon on the governance of the other legal systems.Criminal law should exhibit appropriate restraint and moderation.