隐私盾案后欧美数据的跨境流动监管及中国对策——软数据本地化机制的走向与标准合同条款路径的革新

Supervision on the Cross-border Flows of European and American Data in the Post-SchremsⅡEra and China’s Response——The Trend of Soft Data Localization Mechanism and the Innovation of the Standard Contractual Clauses Path

《隐私盾协议》的失效与标准合同条款有条件的效力维持,反映了欧盟数据规则的布鲁塞尔效应与美国监控资本主义马太效应之间的对抗。欧盟在隐私盾案后形成了事实上的"软数据本地化"。然而,其"软数据本地化"机制从来不是也不应当是其追求的目标。标准合同条款作为欧盟最为重要的数据跨境传输机制,其基于"风险方法"的"基本+补充"的路径革新,具有深刻的国内与国际影响。中国最新的跨境数据流动条款秉承以数据安全为底线的跨境数据自由流动原则,遵循"硬数据本地化"的结构设计,参照了欧盟传输工具的基本框架。在具体规则的设计与落实中,中国应合理限制"硬数据本地化"的扩充,借鉴欧盟标准合同条款范本中的风险调控模块化方法,审慎设计标准合同条款,为本国参与全球数据竞争提供规则基础。

The invalidation of Privacy Shield Agreement and the conditional validity of standard contractual clauses under Schrems II Case reflect the confrontation between the Brussels effect of the EU’s data rules and the monitoring capitalism Matthew effect under US surveillance.Schrems II Case has actually formed the effect of“soft data localization”,whereas the mechanism of“soft data localization”in the EU has never been and should not be the goal it pursues.As the most important cross-border transfer mechanism of the European Union,the standard contractual clauses have profound domestic and international implications for the“basic+supplementary”path innovation based on the“risk method”.Faced with the two outcomes of the case,China’s latest cross-border data flows clauses adhere to the principle of free flows of cross-border data with data security as the bottom line,follow the structural design of“hard data localization”,and imitate the basic framework of EU transmission tools.In the design and implementation of specific rules,China should reasonably limit the expansion of“hard data localization”,learn from the modular method of risk regulation in the EU standard contractual clauses,and carefully design the standard contract clauses to provide the rule basis for China to participate in global data competition.