数据全生命周期安全风险及其刑法回应路径

Research on Criminal Protection of Security Risk during the Entire Life Cycle of Data Flow and Transformation

在数字经济时代数据成为关键生产要素,数据全生命周期的风险管控是维系数字经济稳健发展的关键环节,因而有必要建立数据全生命周期的刑法保障制度。数据全生命周期的风险识别机制,包括风险识别的类型化、法律风险的定型化、刑法风险的规范化等。根据数据风险的形成机制,数据全生命周期的风险,有静态安全风险和动态安全风险两种范式,两种范式的刑法回应思路存在差异。基于数据是多元利益的承载者、主体属性模糊等特点,以及数字经济时代促进共享、流动的价值导向,刑法应当在适度的积极预防主义刑法观和数据安全法益观的指导下,明确“动静二分”的数据安全体系配置,建立以规制动态安全风险为重心,以规制静态安全风险为补充的保障体系。同时在刑事立法层面增设破坏数据完整性罪和危害算法安全罪,在司法层面重树解释理念,以实现产业利益与数据安全的协同发展。

Not only has data become the key factor in the digital economy era,but also the risk management and control of the full life cycle of data has become the key part to maintain the steady development of the digital economy.Therefore,it is necessary to establish a criminal law guarantee system for the full life cycle of data.The risk recognition mechanism of the full life cycle of data includes the categorization of risk recognition,the formalization of legal risks,and the regulation of criminal law risks,etc.According to the formation mechanism of data risks,risks in the full life cycle of data are divided into two types:static security threat and dynamic security threat,which differ in criminal prevention schemes.Based on the characteristics of data as the bearer of multiple interests and its vague subject attribute,as well as the value orientation that promotes sharing and flowing in the era of digital economy,the criminal law should establish a guarantee system that regulates the dynamic security threat as the focus and the static security threat as the complement,under the moderate guidance of the positive preventive view of criminal law and data security as the legal interest.By adding the crime of destroying the integrity of data and the crime of endangering the security of algorithms at the level of criminal law and reinterpreting them at the level of criminal justice,the synergy between industrial development and data security can be achieved.