个人数据跨境流动规制的国际格局及中国应对

International Pattern of Personal Data Cross-border Flow Regulation and China's Response

目前全球规制跨境数据流动的统一规则尚未形成,现有规则主要以欧美为首的发达国家引领。欧盟从人权保护的历史传统出发,将数据权作为一种基本人权,创建了严格限制个人数据跨境流动,以提升数据权保护水平的立法范式;美国基于其信息产业的优势地位以及对数据自由流动的依赖性,奉行以市场为主导,以行业自律为中心的个人数据保护政策,通过签订双边或多边协议,促进数据跨境,维护业已建立的"数据占有和利用"优势,获得最大的经济利益。两种规制方式在价值取向、规制路径和规制结果等方面存在巨大差异,既激烈竞争,又相互妥协和融合,构成了个人数据跨境流动规制的国际格局。在此背景下,我国的应对路径是:完善数据跨境流动立法,提升法律的可操作性;提高企业的合规遵从性,推进行业自律制度建设;大力开展国际合作,积极参与国际规则制定。

At present,the uniform rules of global regulation of cross-border data flow have not yet been formed,and the existing rules are mainly led by developed countries,such as European Union and the United States. The EU,proceeding from the historical tradition of human rights protection,regards data rights as a basic human right,has created a legislative paradigm that strictly restricts the cross-border movement of personal data in order to enhance the level of data rights protection; the United States,based on its dominant position in the information industry and its dependence on the free flow of data,is market-oriented,Personal Data Protection policies,centered on industry self-discipline,promote data cross-border through bilateral or multilateral agreements,and maintain established ＂data possession and utilization＂advantages. There are great differences in value orientation,regulation path and regulation result between the two regulation modes,which are not only fierce competition,but also mutual compromise and integration. Under this background,the countermeasures of our country are to perfect the legislation of cross-border data flow,to enhance the operability of the law,to improve the compliance and compliance of enterprises,and to promote the construction of self-discipline system in the industry. We will vigorously carry out international cooperation and actively participate in the formulation of international rules.