跨境数据本地化:主权考量、安全底线与战略定位

Localization of Cross-Border Data:Sovereignty Considerations,Security Bottom Line and Strategic Positioning

跨境数据本地化已被列入很多国家/地区的法律条文,从多维方式来研究跨境数据本地化有助于对我国数据本地化进行科学的战略定位,维护我国的数据主权,实现数据安全与数据跨境高效流动的双重价值平衡。基于维护数据主权考量,文章以66个国家/地区的数据本地化措施为分析样本,从多个维度剖析数据本地化策略,检视我国数据本地化策略并提出完善对策。研究发现:大多数国家/地区的价值取向是促进数据跨境流动,存在“显性”“隐性”及其二者组合等3种模式,以及本地存储与本地备份两类强度要求,客体类型侧重于个人数据。我国数据本地化策略侧重于维护数据安全,存在本地存储数据类型过多、双重本地化要求过严、数据本地化立法强度升级等问题。文章提出我国跨境数据流动的战略定位设想:正视数据主权的相对性、区别适用绝对的本地存储、坚持显性数据本地化为主、数据类型先分类再分级。

Cross-border data localization has been included in the legal provisions of many countries.Studying cross-border data localization from a multidimensional approach helps to make a scientific strategic positioning of China's data localization,safeguard China's data sovereignty,and achieve the dual value balance of data security and efficient data flow across borders.Based on the consideration of maintaining data sovereignty,the article analyzes the data localization strategies of 66 countries(regions)from various dimensions,reviews China's data localization strategies,and proposes some countermeasures for improvement.The study found that the value orientation of most countries is to facilitate the cross-border flow of data,with three models of"explicit","implicit"and a combination of both,and two types of intensity requirements:local storage and local backup,while the object type focuses on personal data.China's data localization strategy focuses on maintaining data security,and there are problems such as too many types of locally stored data,overly strict dual localization requirements,and escalating intensity of data localization legislation.The article proposes a strategic positioning scenario for cross-border data flows in China:face up to the relative nature of data sovereignty,differentiate the application of absolute local storage,insist on the predominance of explicit data localization,and adjust data types by classifying before grading them.