中概股赴美上市的数据安全审视:风险来源、中美监管与应对

Data Security Review of China-Concept Stocks Listed in the United States:Sources of Risk,Sino-US Regulations and Responses

中概股主体赴美上市存在内容涉密、体量聚合的数据安全风险来源。美国证券信息披露制度对该主体的监管,影响着我国数据安全。中美审计监管合作协议虽有助于弥合审计监管分歧,但仍存在数据安全风险,并可能出现监管矛盾。故此,检视我国现有的相关监管规则,建议我国健全对中概股主体数据安全风险的前置预防与后续追踪机制,实现对数据风险的周延性监管;针对数据安全风险来源,实施差异化处理,完善宽严有别、各有侧重的数据出境安全风险评估机制。

There are data security risk sources of confidential content and volume aggregation for the China-Concept Stocks companies in the United States.The regulation of this subject by the U.S.securities disclosure system affects data security of China.Although the Sino-US audit supervision cooperation agreement helps to bridge the audit and regulatory differences,there are still data security risks and possible regulatory conflicts.Therefore,by reviewing the existing relevant regulatory rules in China,it is suggested that China should improve the pre-prevention and follow-up tracking mechanism for the data security risks of China-Concept Stocks companies,so as to realize the comprehensive supervision of data risks.China also needs to implement differentiated treatment according to the sources of data security risk,and improve the security assessment of outbound data transfer assessment with different degrees of strictness and emphasis.