中国数据跨境流动规则与CPTPP的对接研究

Research on the Docking Between China's Cross-Border Data Transfer Rules and the CPTPP

随着中国正式申请加入CPTPP,中国研究的重点已从之前的“要不要加入”转向“能不能加入”。在数据治理中,数据跨境流动长期为学界关注。当前,中国已经基本构建起数据跨境流动法律框架,这为深入分析中国数据跨境流动规制理念和全面比对CPTPP的相关规定奠定了基础。从内容上看,中国数据跨境流动规则由规范流动的主要规则和其他规则构成,并形成了以数据本土化制度和安全审查制度为主要代表的一系列限制规则。总体说来,这些规则在“数据安全”的基础上凸显了“数据自由”的价值倾向,对数据的跨境流动虽有所限制但相对克制。仅就数据跨境流动而言,从对接难度上看,中国现行规则中的大多数都是符合CPTPP设置的标准的。在文本上与CPTPP差距较大的一些限制规则,如数据本土化制度、限制/禁止出境制度等,在利用好并解释好CPTPP自身规则的情况下也存在对接可能,但这以中国完善数据跨境流动细则为根本前提。

With China's formal application to participate in the CPTPP,the focus of Chinese research has shifted from“join or not”to“can or not”.In data governance,cross-border data transfer has long catched the attention of Chinese academia.At present,China has basically established a legal framework for cross-border data transfer,which lays an important foundation for in-depth analysis of the regulatory idea behind China's cross-border data transfer and comprehensive comparison with relevant provisions of the CPTPP.From the content,China's rules on cross-border data transfer are composed of main rules regulating the flow and other rules,and form a series of restricted rules mainly represented by data localization and secure assessment.In general,these rules highlight the value orientation of“data freedom”on the basis of“data security”,with restricted but restrained measures for cross-border transfer.In the field of cross-border data transfer,most of China's rules are in line with the standards set by the CPTPP.Some restricted rules that are short of the CPTPP in terms of text,such as the data localization and the nontransfer system,are also possible,if the CPTPP's own rules are well used and explained,to be docked with the CPTPP,but this is based on China's ceaseless improvement work of specific rules for cross-border data transfer.