金融数据出境行为的合法性认定研究

Research on the Confirmation of the Legality of the Financial Data Cross-Border Transferring Behavior

金融业机构在境内经营管理过程中沉淀了海量数据,这些金融数据的跨境传播在满足商业、监管等需求的同时,对个人权益、国家安全、公共利益造成了威胁。当前亟须超越原有规则文件的管制思维,在深入分析行为构成要件的基础上,厘清金融数据出境行为"合法"与"违法"界限,向社会主体提供规范性指引,从而实现数据流动与数据安全的恰当平衡。建议按照出境内容、出境目的、出境手段的顺序,依次识别每项构成要件具体类型的安全风险,进而将金融数据出境行为区分为当然合法、附条件合法、违法三种情况,形成层次化、可操作的行为合法性认定路径。

Financial institutions have accumulated massive data in the process of domestic operation and management. The cross-border flow of these financial data not only meets the needs of commerce and supervision,but also poses threats to personal rights, national security and public interests. At present, it is urgent to go beyond the management thinking of the current rules, clarify the boundaries between“legal”and“illegal”behaviors of financial data cross-border transferring on the basis of in-depth analysis of behavioral elements, and provide normative guidance to social subjects, so as to achieve an appropriate balance between data flow and data security.It is recommended that we should identify the specific types of security risks of each constitutive element in turn according to the order of content, purpose and means of cross-border data flow, and then divide the financial data cross-border transferring behavior into three situations, namely legal, conditional legal and illegal behaviors, which forms a hierarchical and operable path of behavior legitimacy judgment.