我国银行金融数据跨境流动的法律规制

Legal Regulation of Cross-border Flow of Financial Data in China’s Banks

随着全球范围内银行金融数据跨境流动日益频繁,欧盟和美国在整体数据跨境流动规则下,形成了各自不同的银行金融数据跨境流动规制模式。我国也在自身国情基础上,建立了将"数据主权、数据保护与发展数字经济相统一"的整体数据跨境流动规制理念,但仍存在不同部门的规制思路有待进一步协调,以及对不同类型的银行金融数据跨境流动进行规制的针对性有待进一步提高等问题。本文认为,未来对银行金融数据的跨境流动的规制应在明确金融监管部门特殊规制权限的基础上,建立以下有区别的规制模式:针对基于商业需求而产生的银行金融数据跨境流动,应当在"知情、同意"的前提下,原则上允许跨境流动,并实行备案管理;针对基于数据流入国监管机构要求而产生的跨境流动,除存在国际协定或其他国际合作形式外,原则上不予认可。

The cross-border flow of bank’s financial data is increasingly frequent around the world,and the EU and the U.S. have formed their own different regulatory models for cross-border flow of bank’s financial data under the whole cross-border data rules. China insists on the regulations of cross-border data flow that integrated data sovereignty, data protection and development of digital economy. However, in China’s current regulations on cross-border flow of bank’s financial data, there are still different regulatory thinking that need to be further coordinated. This article believes the cross-border flow of bank’s financial data should use the method of dichotomy. If the bank’s financial data flows to other countries for commercial needs, it shall be allowed on the premise of clients’ consent and a filing system should be implemented. If the bank’s financial data flows to other countries for the requirements of other countries’ regulatory agencies, it shall be not allowed in principle unless bilateral or multilateral agreements or other international cooperation were reached.