论中国数据跨境制度的现状、问题与纾困路径

Current Situation,Problems,and Relief Path of China’s Cross-Border Data System

中国已经建立了以“安全评估、标准合同、保护认证”为核心、以行业规定为配套的数据跨境制度体系,形成了既保安全又促发展的中国方案。但在具体立法中,该制度在理论与实践上存在双重失衡,在理论上缺乏完善的基础理论支撑,在实践中未能形成系统完整的制度体系,且其在适用关系上出现龃龉,与国际规则之间也存在割裂导致难以衔接,致使数据处理者在合规实践中面临较大成本,难以获得预期成效。不同于美国的“市场话语”和欧盟“权利本位”的数据跨境理论基础,中国应当基于国情明确利益平衡体系下的数据主权理论建构数据出境制度体系,矫正实践中过度保障安全的规制思路,通过单列安全评估、制定行业性与地方性特殊制度等措施,完善相关制度之间、国内法与国际规则之间的适用衔接,着力降低合规成本,保障制度落到实处。

China has established a cross-border data system with“security assessment,standard contract,protection and certification”as its core and industry regulations as its supporting mechanism,which has resulted in a Chinese program that ensures security and promotes development.However,in the specific legislation,the system is unbalanced both in theory and practice.In theory,it lacks perfect basic theory support,and in practice,it has not formed a systematic and complete system.In addition,there is disagreement in the application relationship between the systems,and it is difficult to connect the systems with the international rules due to their separation from the international rules.Data processors face higher costs in compliance practices,making it difficult to achieve the desired results.Unlike various theoretical foundations of cross-border data,such as the“market discourse”of the United States and the“rights-centeredness”of the European Union,China should construct a data outbound transfer system based on its national conditions and the theory of data sovereignty under the system of clear balance of interests,and rectify the regulatory ideas of excessive security protection in practice.China also needs to improve the connection between the relevant systems and between domestic laws and international rules through measures such as separate security assessments,formulation of special industrial and local systems,and endeavor to reduce the compliance costs and ensure the implementation of the system.