欧盟个人数据保护法的全球影响成因与启示

The Causes of the Global Influence of EU Personal Data Protection Law and Its Enlightenment

欧盟个人数据保护法并非一部具体的法律,而是经过数十年演化形成的具有规范意义的个人数据权保护法律体系,它具有自成体系的演进脉络,即从形而上的人权原则到规则层面的区域指令,再到欧盟统一法,进而发展为具有欧盟特点的个人数据保护法框架体系。伴随互联网技术普及而来的信息全球流通使得欧盟个人数据保护法产生了外延性动力,内部利用网络空间的管辖权规则尚未形成国际习惯的时间窗口,试图突破属地原则,不断拓宽其法律直接控制和管辖“域”的范围;外部在其无法直接管辖的所谓“域”外,通过制定个人数据出境监管规则,间接地对数据获取地的法律标准和法律无法直接管辖的境外主体施加合规义务,使其在对获取的个人数据进行收集、处理等相关行为时符合欧盟规范,欧盟个人数据法的生长和扩张路径,契合了国际法规则从无到有的发展规则,甚至对未来个人数据保护规则的全球一体化带来影响。

The EU Personal Data Protection Law is not a specific law,but a general term for a legal system for the protection of personal data rights evolved and formed over decades of years.It has a self-contained evolutionary context,that is,from metaphysical human rights principles to regional directives at the rule level,then to the unified EU laws,and further developed to a personal data protection legal framework system with EU characteristics.The global circulation of information along with the popularization of Internet technology has produced the extensional power for EU’s personal data protection law.The internal jurisdiction rules that use the cyberspace have not yet formed a time window of international custom,it is trying to break through the principle of territory and continuously broadening the range of“domains”directly controlled by law and under its jurisdiction.As for the outside,i.e.,the so-called“domains”that cannot be directly governed,compliance obligations should be indirectly imposed on the legal standards of the places that data acquired and the overseas subjects that are not directly under the jurisdiction of the law through the formulation of supervision rules for the exit of personal data,thus the collection,processing and other related actions of the acquired personal data can be made to comply with EU regulations.The growth and the expansion path of EU Personal Data Law conforms to the development rules of international law rules that start from scratch,and it has even brought influences on the future global integration of personal data protection rules.