美欧跨大西洋数据流动的重启及其前景

Prospects for Reactivating Transatlantic Data Flows between the US and Europe

2023年7月生效的《欧美数据隐私框架》是跨大西洋数据流动的第三次重大实践,意在进一步强化美欧数字联盟关系,扩大双方数字市场规模,并通过统筹两大法域法律规制的双向兼容性,制定有利于美欧利益诉求与监管偏好的跨大西洋数据流动规则。此次跨大西洋数据流动将为全球数字合作贴上“民主化”政治标签,挑战其他法域的数字规则话语权,加剧与中国数字市场竞争态势,并对多边机制参与全球跨境数据流动治理提出更高的要求。然而,该协议未对美国情报机构信息收集活动的必要性、相称性和补救机制的独立性作出规定,也未回应美国情报机构与欧洲数据保护机构间的利益冲突。由于美欧在数据保护机构的制度设计、跨国监管权力和技术可操作性等方面并不匹配,对其他跨大西洋数据流动机制存在的问题不够重视,跨大西洋数据流动前景还具有不确定性。

The EU-US Data Privacy Framework is the third major exercise in transatlantic data flows.The relaunch of the transatlantic data flow is intended to further strengthen the US-EU digital alliance,expand the scale of the US-EU digital market.By integrating the two-way compatibility of legal regulation,it is possible to establish rules for cross-border data flows that are conducive to the interests and preferences of the United States and Europe.The transatlantic data flow will label global digital cooperation as democratization politics,challenge the right of other jurisdictions to make digital rules,intensify the competition with China's digital market,and put forward higher requirements for multilateral mechanisms to participate in the governance of global cross-border data flow.However,the agreement does not ensure the independence of US Intelligence Agencies' information-gathering activities and remediation mechanisms,nor does it address the conflicting interests of European Data Protection Authorities and US Intelligence Agencies.The mismatch between the United States and Europe in terms of the institutional design of data protection agencies,transnational regulatory powers and technical operationalization,as well as the neglect of the problems of other transatlantic data flow mechanisms,will add further uncertainty to the prospects for transatlantic data flows.