论数据处理者的重要数据安全保护义务及刑事责任  

On the Important Data Security Protection Obligation and Criminal Responsibility of Data Processors

作　　者：刘双阳 LIU Shuang-yang

机构地区：[1]中国政法大学刑事司法学院

出　　处：《北京社会科学》2022年第6期80-90,共11页Social Sciences of Beijing

基　　金：国家社会科学基金重大项目(21&ZD209)——数字经济的刑事安全风险防范体系建构研究。

摘　　要：数据分类分级保护制度要求对承载国家安全与公共利益的重要数据进行重点保护,而数据处理者正是保障重要数据安全的第一责任主体。数据处理者对于引起数据安全法益侵害危险的原因的控制支配是其居于保护者保证人地位并承担重要数据安全刑事作为义务的实质根据。为督促数据处理者切实履行重要数据安全保护义务、从源头防范日益严重的重要数据安全风险,《刑法》应与《数据安全法》等前置法有效衔接,在恪守谦抑性原则的基础上增设兼具法定犯、纯正不作为犯、义务犯、结果犯等多重属性的拒不履行重要数据安全保护义务罪,构成要件设置要既能填补当前数据安全犯罪的立法漏洞,又合理划定数据处理者承担不作为刑事责任的范围。The data classification and classification protection system requires the key protection of important data carrying national security and public interests,and the data processor is the first responsible subject to ensure the security of important data.The control and domination of data processors over the causes of the risk of infringement of data security legal interests is the substantive basis for them to occupy the position of protector guarantor and undertake important criminal obligations of data security.To urge data processors to earnestly fulfill their important data security protection obligations and to prevent the increasingly serious important data security risks from the source,the criminal law should be effectively connected with the prepositive laws such as the data security law.Based on the abiding by the principle of modesty,the crime of refusing to fulfill their important data security protection obligations with multiple attributes such as statutory crime,pure omission crime,obligatory crime and consequential crime should be added.The setting of constitutive elements should not only fill the legislative loopholes of current data security crime,but also reasonably delimit the scope of the criminal responsibility of the data processor.

关 键 词：数据处理者 重要数据安全 保证人地位 不作为责任 拒不履行重要数据安全保护义务罪 

分 类 号：D924.36[政治法律—刑法学]