个人数据交易平台交易后怠于履行数据安全管理义务行为的刑法规制
Criminal Law Regulation on Personal Data Trading Platform's Negligence in Fulfilling Data Security Management Obligations after Trading
麦买提·乌斯曼1
作者信息
摘要
在数据时代,数据交易平台作为第三方交易平台,通过监管数据交易的全流程实现了数据的安全流通.由此可知,数据交易平台已成为个人数据流动的中心.与此同时,数据交易平台在数据交易过程中怠于履行数据安全管理义务行为使数据交易平台面临"信任困境",即增加了数据利用者(买方)对数据的不合法利用可能性,导致了个人数据存在严重的泄露风险.可以说,现行《刑法》中的"拒不履行信息网络安全管理义务罪"能够强化数据交易平台在信息网络安全管理中的刑法义务,明确数据交易平台的刑法规制可能.但是,根据刑法及司法解释,数据交易平台主体资格不适格、不具备特定数据安全管理刑法义务等导致了数据交易平台的刑法规制不能,其背后的理论逻辑是"拒不履行信息网络安全管理义务罪"仍坚持"秩序利益观",构成要件设定存在漏洞.由此,要使数据交易平台刑法规制成为可能,不能受制于"拒不履行信息网络安全管理义务罪"的通说法益观,以刑事合规弥补构成要件中存在的不足,确立并强化数据交易平台数据安全管理刑法义务,推进数据交易平台的刑法规制可能.
Abstract
In the era of data,data trading platforms,as third-party trading platforms,achieve the safe circulation of data by regulating the entire process of data trading.From this,it can be seen that data trading platforms have become the center of personal data flow.At the same time,the failure of data trading platforms to fulfill their data security management obligations during the data trading process poses a＂trust dilemma＂ for data trading platforms,which increases the possibility of illegal use of data by data users(buyers)and leads to a serious risk of personal data leakage.It can be said that the crime of ＂refusing to fulfill information network security management obligations＂ in the current Criminal Law can strengthen the criminal law obligations of da-ta trading platforms in information network security management,and clarify the possibility of criminal law reg-ulations for data trading platforms.However,according to criminal law and judicial interpretations,the qualifi-cation of data trading platforms as subjects is not qualified,and they do not have specific criminal law obliga-tions for data security management,which leads to the inability to regulate data trading platforms in criminal law.The theoretical logic behind this is that ＂the crime of refusing to fulfill information network security man-agement obligations＂ still adheres to the＂view of order and interests＂,and there are loopholes in the setting of constituent elements.At this point,it is necessary to make it possible to regulate data security management in accordance with the criminal law of trading platforms,and not be subject to the general view of＂refusing to ful-fill the obligation of information network security management＂.Criminal compliance should be used to com-pensate for the shortcomings in the constituent elements,establish and strengthen the criminal law obligation of data security management in data trading platforms,and promote the possibility of criminal law regulation in da-ta trading platforms.
关键词
数据交易/平台/刑法规制Key words
data trading/platform/criminal law regulation引用本文复制引用
基金项目
新疆维吾尔自治区人民检察院理论研究重点课题(XT2023A21)
新疆社科基金(22BFX042)
出版年
2024
NETL
NSTL
维普
万方数据