公开个人信息的刑法保护:理念、进路与边界

On the Criminal Law Protection of Publicly Disclosed Personal Information:Principles, Approaches, and Boundaries

用刑事手段规制非法处理公开个人信息的行为应当坚持必要性和谦抑性理念。确定公开个人信息刑法保护边界的应然进路是在公开个人信息类型化的基础上实现前置法规定与刑事法规范之间的融贯。以公开意愿为依据可以将公开个人信息区分为主动公开信息、被动公开信息以及非法公开信息。前置法的“合理处理”规则是义务性规范,违反“合理处理”规则无涉侵犯公民个人信息罪保护法益,可能导致民事责任或者行政责任;“明确拒绝”规则和“重大影响”规则是禁止性规范:主动公开的个人信息,权利人“明确拒绝”的,其恢复行使个人信息自决权;被动公开的个人信息,权利人“明确拒绝”的,其保留行使个人信息自决权。对上述信息的处理均可因侵害个人信息自决权法益而构成侵犯公民个人信息罪。处理公开个人信息违反前置法“重大影响”规则,使公民人身、财产安全受到重大损害或者具有重大损害风险的,仍可因侵犯公民信息安全法益而构成侵犯公民个人信息罪。

The use of criminal measures to regulate the illegal processing of publicly disclosed personal information should adhere to the principles of necessity and restraint.The required approach to defi ning the criminal law protection boundaries for publicly disclosed personal information is to integrate prior legislations with criminal norms,based on the categorization of publicly disclosed personal information.Publicly disclosed personal information can be classified into actively disclosed information,passively disclosed information,and illegally disclosed information.The“reasonable processing”rule of prior legislations is a mandatory norm,and violations of this rule do not involve infringing on the legal interests protected by the crime of violating citizens’personal information,possibly leading to civil or administrative liability.The“explicit refusal”and“signifi cant impact”rules are prohibitive norms.For actively disclosed personal information,if the right-holder explicitly refuses,they restore the exercise of their personal information selfdetermination rights.For passively disclosed personal information,if the right-holder explicitly refuses,they retain the right to exercise their personal information self-determination.The handling of the aforementioned information may constitute the crime of infringing on citizens’personal information rights due to the infringement of personal information self-determination rights.If the processing of publicly disclosed personal information violates the“signifi cant impact”rule of prior legislations,causing signifi cant harm or risk to the safety of citizens’person or property,it may still constitute the crime of violating citizens’personal information due to the infringement of the legal interests of citizens’information security.