数据安全刑法保护扩张的合理边界

《数据安全法(草案)》的发布是数据安全作为独立法益的立法宣示,基于数据安全对个体利益、公共安全和国家安全的重要价值,刑法有必要将其纳入保护范围。现行刑法对数据安全的保护是通过制裁信息犯罪间接实现的,由于刑法视阈下的信息和数据存在着本质性差异,未来刑法必然要建立新的数据犯罪罪名体系,实现数据安全领域刑法保护的大规模扩张。为了避免刑法扩张演化成违背谦抑性的公权力滥用,必须进行"合边界性审视",确保其不会突破刑法自身的边界。由于数据安全法益自身无法通过"法益原则"实现刑法边界划定功能,有必要引入"广义危害性原则",在数据安全领域的刑法保护扩张之前,划定扩张的合理边界。

Reasonable Boundaries of the Expansion of Criminal Law Protection for Data Security

The promulgation of the "Data Security Law" is a legislative declaration of data security as an independent legal benefit. Based on the important value of data security to individual interests, public security and national security, it is necessary for the criminal law to include it into the scope of protection. The current criminal law protects data security is realized indirectly through sanctions on information crimes. Due to the essential differences between information and data under the criminal law, the future criminal law will inevitably establish a new data crime accusation system to realize the protection of large-scale expansion of the criminal law in the field of data security. In order to prevent the expansion of the criminal law from evolving into an abuse of public power that violates the modest and restrained nature, a "boundary review" must be carried out to ensure that it will not break the boundaries of the criminal law. Since the legal benefits of data security cannot realize the boundary delimitation function of the criminal law through the "principle of legal benefits", it is necessary to introduce the "generalized harmfulness principle" to delineate a reasonable boundary for expansion before the expansion of criminal law protection in the field of data security.