数据跨境流动的欧美政策演进及启示——基于数据保护与数字经济发展权衡视角

The Evolution and Enlightenment of European and American Policies on Cross-border Data Flow—Based on the Perspective of Balancing Data Protection and Digital Economy Development

文章主要基于数据保护与数字经济发展权衡的视角,研究个人数据跨境流动问题。首先对相关文献进行综述:一方面,数据跨境流动能促进数字经济乃至宏观经济的发展,而限制数据流动给宏微观经济带来负面效应;另一方面,数据本地化有助于保障本国数据安全的观念却受到质疑和反驳,理论研究倾向于支持数据跨境流动。接着考察欧盟和美国的数据跨境流动政策:欧盟一直强调并坚持严格保护个人数据,这明显地抑制了数据跨境流动和数字经济发展,但欧盟的立场没有改变,欧盟更为看重对数据隐私的高标准保护;美国比较重视数字经济的发展,主张适度的隐私保护。最后给出若干建议:我国的国情有自身的特征,不宜照搬欧盟的数据制度,可在参考GDPR的基础上适当地降低数据保护水平;逐步放宽数据保护,便利数据跨境流动,应继续成为未来一段时期我国数据政策调整的着力点;我国还可选择加入APEC的CBPR体系,在适度的隐私保护框架下促进数据跨境流动和数字经济发展;我国在跟他国的数据合作中,政府机构出于国家安全目的获取对方公民的个人信息,应符合“必要”和“成比例”的要求。

Based on the perspective of balancing data protection and digital economy development,this paper studies the cross-border flow of personal data.First,the relevant literature is reviewed.The cross-border data flow can promote the development of the digital economy and even the macro economy,while limiting the data flow can bring negative effects to the macro and micro economy.On the other hand,the concept that data localization helps to ensure the security of domestic data has been questioned and refuted.Theoretical research tends to support the cross-border flow of data.Crossborder data flow policies in the EU and the U.S.are then examined.The EU has always emphasized and adhered to the strict protection of personal data,which obviously inhibits the cross-border flow of data and the development of digital economy.However,the EU’s position has not changed,and the EU attaches more importance to the high standard protection of data privacy.The United States attaches more importance to the development of the digital economy and advocates moderate privacy protection.Finally,several suggestions are made.China’s national conditions have their own characteristics,so it is not suitable to copy the data system of the European Union.The data protection level can be appropriately reduced on the basis of reference to GDPR.Gradually relaxing data protection and facilitating the cross-border flow of data should continue to be the focus of China’s data policy adjustment in the future.China can also choose to join the CBPR system of APEC to promote the cross-border data flow and the development of digital economy under the framework of moderate privacy protection.In China’s data cooperation with other countries,government agencies of one party may obtain personal information about citizens of the other party for national security purposes,which should meet the requirements of“necessity”and“proper proportion”.