数据破坏型网络犯罪中“数据”范围的认定

Determination of the Scope of “Data” in Data-Destructive Cybercrimes

摘要: 由于《刑法》第二百八十六条第二款对“数据”范围缺乏明确界定，数据破坏型网络犯罪的司法适用面临罪质认定不清与同案不同判的困境。双重法益说通过区分系统安全法益与数据法益，明确该款所保护的数据法益兼具公共秩序属性与技术属性，从而为“数据”范围的界定提供规范基础。本文主张，第二款中的“数据”应限定为承载公共信任或具有社会价值的非功能性数据，原则上排除纯粹私人数据，同时将虽属个人数据但足以影响社会信任的数据纳入保护范围。为破解司法适用困境，应以数据法益的社会信任功能为指引，区分功能数据与一般数据，细化“后果严重”的判断标准，并结合数据的技术属性与规范属性构建第二款“数据”范围的认定框架，以实现本款适用的明确性与适度性。

Abstract: The ambiguous definition of “data” in Article 286 (2) of the Criminal Law of China has led to challenges in judicial application, including unclear offense classification and inconsistent rulings in similar cases. Grounded in the dual legal interest theory, the legal interest of data embodies both public order and technical dimensions, necessitating a shift from traditional static protection to recognizing the dynamic value of data in network interactions. This theory distinguishes system security from data-related legal interests, providing a normative foundation for defining the scope of “data”. This article argues that the determination of “data” should focus on non-functional data that carries public trust or social value, excluding purely private data while including personal data that impacts social trust, thereby ensuring comprehensive protection. To address judicial challeng-es, the social trust function of data-related legal interests should guide the differentiation between functional and general data, with a quantified standard for serious consequences. By integrating technical and normative attributes, the scope of “data” under Article 286 (2) can be defined to achieve clarity and appropriateness in applying the offense.