数据犯罪的刑法规制路径审视与优化

Reviewing and Optimizing the Path of Criminal Law Regulation of Data Crime

保障数据安全和促进数据共享是新时代背景下数据规范治理的目标。现行《刑法》对于数据犯罪的规制体现在“非法获取计算机信息系统数据罪”和“破坏计算机信息系统罪”两罪名。数据安全与计算机信息系统安全相混淆,导致数据的适用范围被不当扩大;数据犯罪的行为方式多样,当前立法保护并不周延;数据的属性和重要程度不同,刑罚量刑幅度和刑罚种类较为单一不能满足对数据分类分级保护的需要;大数据平台作为对数据管控的绝对优势方,缺少对其信息网络安全管理义务的规定。对此,需基于实质法益侵害性明确“数据”的内涵和外延;明确“非法获取计算机信息系统数据罪”适用于无法用传统法益规制的重要数据的获取;完善相应的刑罚幅度和刑种,实现罪责刑相适应;增加新的罪名,对数据的非法提供、泄露、破坏纳入刑事法网;增加对数据平台的规制,对违反特殊职业义务的网络数据管理者适用禁止令或职业禁止,以期实现对数据犯罪刑法规制路径的优化。

To ensure data security and promote data sharing is the goal of data governance in the new era.The regulation of data crime in the current Criminal Law is embodied in the two charges of“the crime of illegally obtaining computer information system data”and“the crime of destroying computer information system”.Data security is confused with computer information system security,resulting in improper expansion of the scope of application of data;There are various ways of data crime,and the current legislative protection is not comprehensive;Due to the different attributes and importance of the data,the range and type of punishment are relatively single,which can not meet the needs of data classification and classification protection;The big data platform,as the absolute dominant party of data control,lacks provisions on its information network security management obligations.Therefore,the connotation and extension of“data”should be clarified based on the infringement of substantive legal interests;It is clear that the“crime of illegally obtaining computer information system data”applies to the acquisition of important data that cannot be regulated by traditional legal interests;Perfect the corresponding punishment range and punishment type to realize the adaptation of crime,responsibility and punishment;Add new charges and include the illegal provision,disclosure and destruction of data into the criminal law network;Increase the regulation of data platforms and apply prohibitions or professional prohibitions to network data managers who violate special professional obligations in order to optimize the criminal law regulation path of data crimes.