互联网征信制度下个人金融信息侵权保护的归责原则研究

Research on the Principle of Liability for the Protection of Personal Financial Information Infringement under the Internet Credit Information System

摘要: 本文聚焦互联网征信制度下个人金融信息安全风险，指出我国个人金融信息侵权保护面临概念界定不明和责任认定不清的困境。通过分析相关法律法规表述及各学者观点，明确个人金融信息应归属于个人信息范畴，其存储、处理和保护主体包括金融机构、第三方支付平台及征信机构等。并探讨了个人金融信息侵权归责原则，分析学界中关于一元论、二元论和多元论的理论争议，从侵权主体和行为复杂性、举证责任合理性两方面阐述多元化归责原则的必要性。最后提出构建多元化归责原则体系：在不同责任主体标准下，一般自然人侵权适用过错责任，金融机构等侵权适用过错推定责任，公务机关侵权适用无过错责任；在不同信息类型标准下，侵害“无金融属性”的一般个人金融信息适用动态归责原则，侵害“含有金融属性”的个人金融信息一律适用无过错责任，实现双方当事人的利益平衡，维护金融秩序安全和社会公平正义。

Abstract: This paper focuses on the security risks of personal financial information under the internet credit reporting system, highlighting the challenges in China’s protection of personal financial information infringement, including ambiguous concept definition and unclear liability determination. Through analyzing relevant legal provisions and scholarly perspectives, it clarifies that personal financial information should be categorized within the scope of personal information, with its storage, processing, and protection involving financial institutions, third-party payment platforms, and credit reporting agencies. The paper further explores the liability attribution principles for personal financial information infringement, examining theoretical debates among scholars regarding monism, dualism, and pluralism. It elaborates on the necessity of a pluralistic liability attribution principle from two aspects: the complexity of infringing subjects and behaviors, and the rationality of burden of proof. Finally, the paper proposes the construction of a pluralistic liability attribution principle system: under different liability subject standards, ordinary natural person infringement applies fault liability, financial institution infringement applies presumed fault liability, and public authority infringement applies no-fault liability; under different information type standards, infringement of “non-financial attribute” general personal financial information applies dynamic liability attribution principles, while infringement of “financial attribute” personal financial information uniformly applies no-fault liability, thereby achieving a balance of interests between parties and maintaining financial order security and social fairness and justice.