论个人信息保护行政处罚制度——以《个人信息保护法》第66条为中心  

On Administrative Punishments Concerning Personal Information Protection in China——Centered on Article 66 of the Personal Information Protection Law

作　　者：彭錞 PENG Chun(Law School Peking University,Beijing 100084)

机构地区：[1]北京大学法学院,北京100084

出　　处：《行政法学研究》2022年第4期38-49,共12页ADMINISTRATIVE LAW REVIEW

基　　金：2020年度国家社科基金青年项目“失信联合惩戒制度的法治困境及对策研究”(项目批准号:20CFX019)。

摘　　要：在个人信息保护领域,除网信部门外,监管对象处理个人信息的行政机关都具有行政处罚权。由此产生的职能管辖冲突应按《行政处罚法》第25条和一事不再罚原则来协调;地域管辖冲突以多元地域管辖联结点等规则来协调;层级管辖冲突视违法情节轻重来协调。处罚对象是作为个人信息处理者或个人信息处理受托人的组织和自然人,以民事主体身份处理个人信息的国家机关亦可受罚。受罚行为是负有责任能力和条件的主体违反《个人信息保护法》一至五章且不存在违法阻却事由的行为。违法情节可分轻微、较重、拒不改正、严重、特别严重,均应责令改正,并根据过罚相适原则进一步匹配处罚。In the area of personal information protection, apart from the cybersecurity and informatization agencies at all levels, administrative organs whose supervisees process personal information all have the power to impose administrative penalties.The resulting functional jurisdictional conflicts shall be resolved according to Article 25 of the Administrative Punishment Law and the principle of prohibition of double jeopardy.Geographical jurisdictional conflicts shall be resolved through multiple geographical contacting points.And hierarchical jurisdictional conflicts shall be resolved based on the severity of the infringement.The objects of punishment are organizations and natural persons who act as personal information processors or trustees, and state organs that process personal information as private law entities can also be punished.What is punishable is any violation of Chapters 1 to 5 of the Personal Information Protection Law by a culpable subject.The severity of violation can be divided into five grades: minor, serious, refusal to rectify, serious, and especially serious.In all five situations, the culprit should be ordered to rectify, and the punishment should be meted out according to the principle of proportionality.

关 键 词：个人信息保护法 行政处罚 管辖协调 处罚对象与行为 过罚相适 

分 类 号：D922.16[政治法律—宪法学与行政法学]