迈向“风险”范式的侵犯公民个人信息罪之教义学重构

Doctrinal Reconstruction of the Crime of Infringement of Citizens’Personal Information towards the“Risk-based”Approach

刑法学界主流立场对侵犯公民个人信息罪的阐释与建构,因单纯倚重“权利”范式而存在理论缺陷、方法缺陷和现实缺陷,无力应对数据信息社会对个人信息保护提出的全新挑战。“风险”范式是近年来涌现的个人信息保护理念,能够合理分配信息处理活动的风险,将个人信息保护的主要责任与义务分配给制造风险的信息处理者。对侵犯公民个人信息罪的学理阐释,应统合两种范式的合理内核,重塑保护法益、犯罪属性以及不法阻却事由。侵犯公民个人信息罪的保护法益是数据信息社会中个体的匿名性;侵犯公民个人信息罪是法定犯而非自然犯,“违反国家有关规定”不能被矮化为“取得同意”;个人的知情同意与信息处理者基于风险的风险控制义务共同构成了不法阻却事由。

Due to its reliance solely on the“Rights-based”approach,the mainstream stance regarding the interpretation and construction of the crime of infringement of citizens’personal information has theoretical flaw,methodological flaw and practical flaw.The“Rights-based”approach is incapable to deal with the new challenges posed by the information society.The“Risk-based”approach is a emerged concept which can reasonably allocate the risks of information processing activities and assign the main obligations of personal information protection to information processors.The academic interpretation of the crime of infringing on citizens’personal information should integrate the reasonable core of the two approaches and reshape the doctrinal structure.The legal interest protected by the crime of infringing on citizens’personal information is the anonymity of individuals in the data information society;the crime of infringing on citizens’personal information is a statutory crime rather than a natural crime,and“violating relevant national regulations”cannot be reduced to“obtaining consent”;personal consent and the information processor’s obligations to compliance constitute the grounds for exclusion of illegality.