互联网技术在给现代生活带来极大便利的同时,也为犯罪分子提供了可乘之机.犯罪分子通过黑客、恶意软件、社会攻击、特权滥用和新技术窃取等信息窃取手段,收集和窃取高价值的个人信息,严重危害个人信息安全,引发各种社会问题.目前,个人信息保护法律体系的不完善,相关技术概念的界定不明确,盗贼刑事责任追究难度大等问题都对我国建立个人信息保护机制造成了不利影响.因此,文章分析了个人信息被窃取的技术手段,构建了个人信息保护框架,认为通过完善现行法律法规,制定个人信息保护专项法律,明确法律监督和问责机制,可以降低个人信息被盗用的风险.“,”While internet technology has brought great convenience to modern life,it also provides opportunities for criminals.Through information theft methods such as hacking,malware,social attacks,privilege misuse and new technology theft,criminals collect and steal personal information of high value.These illegal acts seriously harm personal information security and lead to various social problems.At present,the problems of the defi-ciency of personal information protection legal system,unclear definition of related technical concepts,as well as difficulties of investigating criminal responsibility for thieves have caused adverse effects for establishing per-sonal information protection framework in China.This paper analyses the technical means of personal information theft and builds a personal information protection framework.It deems that by refining current laws and regula-tions,formulating special personal information protection laws,and clearing law supervision and accountability mechanisms for individuals,the risk of personal information theft can be reduced.