数据安全监管的欧盟经验及对中国的启示

Supervision of Cross-border Data Flow:EU Experience and China's Reference

数据已经成为一种生产要素,数据流动可以创造经济效益,但也存在安全风险,国家、数据运营者以及数据所有者等主体需要对数据的安全有序流动进行监管和保护。经过几十年的数据安全监管规则体系建设,欧盟形成了以《一般数据保护条例》为引领的相对严格、完善和多层次的数据安全监管规则体系,并在规则框架内设置了相应的监管机构,构建起覆盖全域和成员国两个层面的数据保护机构运行机制。借鉴欧盟的经验做法,可以从加快制定数据分级分类标准,细化和明确数据流动中不同主体的权利、职责和义务,参与双边和多边监管规则建设等方面完善我国数据安全监管制度体系;在监管机构的设置及运行方面,可以构建“1+X”数据保护机构体系,并形成纵向与横向相结合的运行机制,进一步释放数据价值。

As a new factor of production,data plays an increasingly important role in economic and social life.Data flow can create economic benefits but also poses security risks.Entities such as the state,data operators,and data owners need to regulate and protect the security of data.After decades of building a regulatory system for data security and orderly flow,the EU has formed a relatively strict,comprehensive,and multi-level regulatory system for data security and orderly flow by the General Data Protection Regulations(GDPR),and corresponding regulatory agencies have been established within the framework of the rules,and an operational mechanism for data protection agencies covering both the entire region and member states has been established.Drawing on the experience and practices of the European Union,we can improve China's data security and orderly flow regulatory rule system by accelerating the development of data classification standards,refine and clarify the rights,responsibilities and obligations of different entities in data flow,participating in bilateral and multilateral rule construction.In terms of the establishment and operation of regulatory agencies,a"1+X"data protection agency system can be established,and a vertical and horizontal operation mechanism can be formed to promote the safe and orderly flow of data,further unleashing data value.