个人金融数据跨境流动规制研究

On Regulation of Cross-border Flow of Personal Financial Data

随着数字科技与金融服务的深度融合,个人金融数据跨境流动已成为不可逆趋势。域外数据立法试图以规制的方式寻求个人金融数据跨境自由流动同个人金融数据保护两者之间的平衡。我国个人金融数据经历了从绝对本地化要求到有条件跨境流动的过程。个人金融数据跨境流动规制面临多重困境:个人金融数据跨境流动规范不清晰和不统一;个人金融数据跨境流动安全审查未引入针对金融行业的考量因素;个人金融数据跨境流动国际规则制定中难以形成我国影响力。在未来完善个人金融数据跨境流动规制的进程中,"进"应树立动态的个人金融数据价值观,细化个人金融数据跨境流动具体规制措施,为个人金融数据跨境流动的不同场景构建区别化的规制模式;"退"则通过识别个人金融数据跨境流动过程中的不同法益,在现行法律体系框架下积极寻求和探索综合且多元的个人金融数据保护路径。

With the deep integration of digital technology and financial services, the cross-border flow ofpersonal financial data has become an irreversible trend. Extraterritorial data legislation attempts to seekbalance between the freedom of cross-border flow of personal financial data and the protection of personalfinancial data. China’s personal financial data has experienced a shift from absolute localization requirementsto conditional cross-border flow. The regulation of cross-border flow of personal financial data faces multipledifficulties: the norms of cross-border flow of personal financial data are not clear and unified;the securityreview does not take into considerations the financial industrial factors;and it is hard for China to exertinfluence on the formulation of its international rules. To further improve the regulation of cross-border flow ofpersonal financial data, it is essential to move"forward"by establishing dynamic values of personal financialdata, refining specific regulatory measures and building differentiated regulatory models for different scenariosof cross-border flow of personal financial data, and retreat"back"by identifying different legal interestsconcerned and actively seeking and exploring comprehensive and diversified paths to the protection of personalfinancial data under the current framework of legal system.