個人信息保護法與侵犯公民，個人信息罪的銜接機制

《個人信息保護法》是數字時代的前沿性法律，具有前置法、不完整領域法、不真正附屬刑法的特徵，與《刑法》中侵犯公民個人信息罪的規定存在時差。為了有效融通規範之間的銜接鴻溝，需要將《個人信息保護法》嵌入侵犯公民個人信息罪的出入罪適用流程。在入罪銜接機制上，將兩法中的個人信息範圍作統一理解，避免犯罪圈的擴張化；將前置法關於個人信息的類型劃分和處理設置，作為解釋侵犯公民個人信息罪構成要件的方向，以實現罪刑均衡和法律銜接。在出罪銜接機制上，《個人信息保護法》上的“同意”因法益闕如而阻卻刑事違法，其餘《個人信息保護法》上的正當化事由均因法益衡量原理阻卻刑事違法，相應正當化事由可分別歸入刑法教義學上的正當業務行為、緊急避險、法令行為，而合理處理已公開個人信息應成為數字時代獨立的新型違法阻卻事由，前述事由可在個人信息分類場景下為相關行為出罪。

The Personal Information Protection Law is a cutting-edge law in the digital age. It has the characteristics of pre-emptive law, incomplete field law, and no real subsidiary criminal law. There is a time lag with the provisions of the criminal law on the crime of infringing on citizens' personal information. In order to effectively bridge the gap between norms, it is necessary to embed the Personal Information Protection Law into the application process of the crime of infringement of citizens' personal information. In terms of the criminalization linkage mechanism, the scope of personal information in the two laws should be understood uniformly to avoid the expansion of the criminal circle; the classification and processing settings of personal information in the pre-position law should be used to explain the constitutive elements of the crime of infringement of citizens' personal information, direction to achieve balance between crimes and punishments and legal coherence. In terms of the connection mechanism between crimes,“consent”in the Personal Information Protection Law prevents criminal violations due to the lack of legal interests, and other legitimate reasons in the Personal Information Protection Law prevent criminal violations due to the principle of weighing legal interests. The corresponding legitimate reasons can be classified into legitimate business behavior, emergency avoidance, and legal behavior in the criminal law doctrine, and the reasonable handling of disclosed personal information should become an independent new illegal obstacle in the digital era. The aforementioned reasons can decriminalize related behaviors in the context of personal information classification.