论CPTPP数据跨境流动的法律规制

On the Legal Regulations of CPTPP Data Cross-border Flow and Personal Information Protection

数据的价值在于流动,但是数据跨境流动不能逾越国家主权和数据人权的边界,我国于2021年正式申请加入CPTPP,并积极参与电子商务章节的谈判,其中如何对接数据跨境流动与个人信息保护规则是我国参与谈判的核心议题之一。CPTPP既强调数据跨境流动的自由性,又特别注重跨境个人信息的法律保护,这与我国偏向数据本地化的立法倾向存在较大差异,这种矛盾与冲突主要表现为“安全与发展”理念的失衡、国内规制体系的不兼容性以及安全配套机制的缺失。基于构建网络空间“人类命运共同体”的历史使命,我国既要切实维护国家主权、网络安全、社会公共利益,又要积极对接CPTPP强制性规则,合理运用安全例外条款,不断完善国内行业监管机制和安全评估体系。

The value of data lies in the flow,but cross-border flowing of data should not go beyond the boundary of national sovereignty and data property rights.In 2021,China has formally applied for a place in the CPTPP and hence had to enter into the negotiation over the e-commerce,during which how to link up the crossborder data flow with the personal information protection is an essential issue for China.CPTPP lays much stress on both the freedom of the data flowing and cross-border legal protection of personal information,which appears different from our nation’s legislation that is inclined to data localization.The differences and contradictions are mainly manifested as a disagreement on the concept of"security and development",incompatibility of domestic regulation system and lack of safety supporting mechanism.With the mission of building"a community with a shared future"in cyberspace,China should not only effectively safeguard national sovereignty,cybersecurity and public interests,but also actively adapt to the mandatory rules of CPTPP,so as to reasonably use the security exception provisions to improve the domestic industry regulatory mechanism and security evaluation system.