出售个人数据的刑法规制路径  

The Regulatory Path of Criminal Law on the Sale of Personal Data

作　　者：敬力嘉 JING Lijia

机构地区：[1]武汉大学法学院

出　　处：《上海政法学院学报（法治论丛）》2024年第4期100-110,共11页Journal of Shanghai University of Political Science & Law(The Rule of Law Forum)

摘　　要：出售未经去识别化、匿名化个人数据的行为在实践中广泛存在,可能涉及的主要罪名是侵犯公民个人信息罪。刑法定性可能存在争议的,主要是出售内容已公开个人数据与实名认证社交平台账户两种情形。对于前者,二次授权说、合目的性考察说、客观开放程度说等既有观点多仅以已公开个人信息为行为对象,对于后者,司法实践的判决仅以通讯录好友个人信息为对象,忽视了数据权益的维度,难以对出售行为是否构成本罪提供妥当的判断标准。超越本罪仅保护信息主体个人信息权益的认识,基于不同的个人信息处理场景,可准确识别出售行为在前述两种情形下分别对信息主体的个人信息自决权造成了实害结果,给社交平台好友的人身、财产权益造成了抽象危险。应将出售个人数据的行为纳入本罪的规制范围,并通过司法解释与刑事立法的进一步审慎完善,实现对关联主体合法权益的妥当保护。The sale of un-identified and un-anonymized personal data is not rare in practice,and the main crime that may be suspected is the crime of infringing citizens’personal information.The judgment of criminal law may be controversial,mainly in the two circumstances of selling personal data whose content has been made public and real-name authentication of social platform accounts.For the former,the established views such as the theory of secondary authorization,fitness for purpose,and objective degree of openness only take publicly available personal information as the object of the act,while for the latter,the judgments in judicial practice only take personal information of friends in the Contacts as the object of the act,ignoring the dimension of the data rights and interests,and it is difficult to provide a proper standard of judgement as to whether the act of sale constitutes the present offence.Beyond the understanding that this offence only protects the rights and interests of the informational subject,based on different personal information processing scenarios,it is possible to accurately identify that the act of selling has caused actual harm to the informational subject’s right to self-determination of personal information in the two aforementioned scenarios,respectively,and has caused abstract danger to the personal and property rights and interests of the friends on the social platform.The act of selling personal data should be included in the scope of regulation of this offence,and the legitimate rights and interests of related subjects should be properly protected through further prudent improvement of judicial interpretation and criminal legislation.

关 键 词：数据犯罪 个人数据 侵犯公民个人信息罪 个人信息的刑法保护 

分 类 号：DF611[政治法律—刑法学]