公民个人信息刑法保护的偏差与匡正

Deviation and Correction of Criminal Law Protection of Personal Information

现行立法及学术观点有关公民个人信息的刑法保护存在三大误区:一是认为所有的公民个人信息都是刑法保护的对象;二是将刑法保护公民个人信息的主要目标解读为保护个人信息承载的权利;三是主张敏感个人信息刑法不应分级保护。事实上,只有敏感个人信息才宜纳入刑法保护,因为公民个人信息的外延极为宽泛,也只有敏感个人信息才值得上升到刑法保护。刑法保护公民个人信息的主要目标不是为了保护公民个人信息权,而是为了保护与之关联的人身权、财产权,这是相关规范性文件的意旨,也是公民个人信息在刑法中的地位变迁的应然解读。侵犯个人信息罪也不应承载保护隐私权的功能,因为个人信息权已经从隐私权中分离出来成为一项独立的权利,且隐私权比个人信息权更重要,不宜由侵犯公民个人信息罪附带保护。取消敏感个人信息分级保护的观点不可取,因为敏感个人信息潜在的风险程度差异巨大,需要采取差异化保护。

There are three major misunderstandings in the current legislation and academic views on the criminal protection of citizens'personal information:first,it is believed that all citizens'personal information are the objects of criminal protection;the second is to interpret the main goal of the criminal law to protect citizens'personal information as protecting the rights carried by personal information;third,it advocates that sensitive personal information should not be protected at different levels.In fact,only sensitive personal information should be included in the adjustment of criminal law,because the extension of citizens'personal information is very broad,and the scope of protection of criminal law needs to be compressed,and only sensitive personal information is worthy of being protected by criminal law.The main goal of the criminal law to protect citizens'personal information is not to protect citizens'personal information rights,but to protect the personal rights and property rights associated with it.This is the intention of the relevant normative documents,and also the proper interpretation of the status changes of citizens'personal information in the criminal law.In addition,it is not advisable to cancel the hierarchical protection of sensitive personal information,because the potential risk level of sensitive personal information varies greatly,and differential protection is required.