摘要
从制度实践考察,欧盟《一般数据保护条例》(GDPR)的域外效力对域外大型企业形成较有效规制,并引领国际社会相关立法趋势,是近年来国内法域外适用方面一个较为成功的样本。GDPR的域外效力以市场和价值观为依托,通过国际法框架下对法律工具的高水平运用得以施行。就立法而言,GDPR在域外效力的扩张和限制之间非常谨慎地寻求管辖的合理边界,力求确立管辖的正当性。就执法而言,基于对域外执法可行性的考量,欧盟通过多种途径的国内和双边机制安排,促进GDPR域外效力的实施。面对域外执法中可能产生的正面法律冲突和阻碍,欧盟亦灵活务实、有所妥协。我国《个人信息保护法》已仿效GDPR的“目标主体”标准进行域外效力立法,目前的重点是尽快构建有效执法框架。我国应借鉴欧盟相关经验,结合我国实际,做好配套执法措施的制度设计、明确执法思路、逐步建立长效跨境执法合作机制,为我国《个人信息保护法》域外效力的执行落地提供有力支撑。
From the perspective of institutional practice,the extraterritorial effect of the EU General Data Protection Regulation(GDPR) has formed a relatively effective regulation on large enterprises outside the EU,and led the relevant legislative trend of the international community.It is a relatively successful sample in the extraterritorial application of domestic law in recent years.The extraterritorial effect of GDPR is based on the market and values,and is implemented through the high-level application of legal tools under the framework of international law.As far as legislation is concerned,GDPR is very careful to seek the reasonable boundary of jurisdiction between the expansion and limitation of extraterritorial effect,striving to establish the legitimacy of jurisdiction.In terms of law enforcement,considering the feasibility of extraterritorial law enforcement,the EU has promoted the implementation of GDPR’s extraterritorial effect through various domestic and bilateral mechanisms and arrangements.In the face of possible head-on legal conflicts and obstacles arising from extraterritorial law enforcement,the EU has also been flexible,pragmatic and had some compromises.China’s Personal Information Protection Law has followed the “target subject” standard of GDPR for extraterritorial effect legislation.The current focus is to build an effective law enforcement framework as soon as possible.We should learn from the relevant experience of the EU and combine the actual situation of our country to make the system design of law enforcement measures,clarify the idea of law enforcement,and gradually establish the mechanism of cross-border law enforcement cooperation,so as to provide strong support for the implementation of the extraterritorial effect of Personal Information Protection Law.
出处
《国际经济法学刊》
2023年第1期20-36,共17页
Journal of International Economic Law
基金
国家社科基金重大项目“国际法与国内法视野下的跨境电子商务建设研究”(项目批准号:17ZDA141)的阶段性成果。
关键词
《一般数据保护条例》
域外效力
立法管辖
域外执法
执法合作
GDPR
Extraterritorial Effect
Legislative Jurisdiction
Extraterritorial Law Enforcement
Law Enforcement Cooperation