论已公开个人信息的刑法保护

On the Criminal Law Protection of Public Personal Information

摘要: 已公开个人信息属于侵犯公民个人信息罪“公民个人信息”，我国司法实践中对擅自处理已公开个人信息的行为按照“二次授权规则”处理，要求行为人在处理时必须征得权利人许可，未获得许可的按照侵犯公民个人信息罪处理，是对公民个人信息的过度保护，不利于信息流通共享和数字经济发展。同时，已公开个人信息形式多样，需要以类型化的思维对本罪认定标准进行分析。对自行公开的个人信息，采用一般可访问性作为判断标准；对于被动公开的个人信息引入前置法“合理处理规则”，从处理目的、处理方式和处理结果三方面进行分析。

Abstract: Disclosed personal information belongs to “citizens’ personal information” infringed by “Crime of Infringement upon Citizens’ Per-sonal Information”. In China’s judicial practice, the unauthorized handling of disclosed personal in-formation will be handled in accordance with the “secondary authorization rule”. It requires the perpetrator to obtain the permission of the right holder when processing, otherwise it will be han-dled as a crime of infringing on citizens’ personal information. This practice excessively protects cit-izens’ personal information, which is not conducive to information circulation and the development of the digital economy. At the same time, there are various forms of disclosed personal information, and it is necessary to analyze the criteria for determining this crime with typed thinking. For self-disclosed personal information, “general accessibility” shall be used as the standard for judgment. For passively disclosed personal information, a pre-emptive law called “reasonable pro-cessing rules” which considers and analyzes from three perspectives: processing purpose, processing method and processing result shall be introduced.