中国企业个人数据跨境传输最佳法律实践探讨  

Cross-border Personal Information Transmission:In the View of Chinese Companies

作　　者：娄鹤 陈国彧 LOU He;CHEN Guo-yu(Hiways Law Firm,Shanghai 200120,China)

机构地区：[1]上海市海华永泰律师事务所

出　　处：《信息安全与通信保密》2019年第8期50-62,共13页Information Security and Communications Privacy

摘　　要：随着大数据+物联网时代的来临,企业利用客户数据进行的挖掘、分析、广告营销等商业化活动日趋频繁,这也包括大量的跨境个人数据传输活动。与此同时,以欧盟的《通用数据保护条例》(以下简称GDPR)为代表,不同国家或法律区域,正在加强数据主权保护的立法,但其基本态度、法律要求宽严不一,为企业的合规工作带来很大难度。中国企业在参与经济全球化的过程中,面临个人隐私保护及数据合规在内的新挑战和压力,如何能既遵守各国法律法规,又满足企业商业需求,降低企业经营的法律风险,成为了亟待解决的问题。本文将从分析中国、欧盟和美国三个法律区域近期已生效或即将生效的关于数据跨境传输的法律规定出发,结合实务经验,分析跨境传输的典型场景和近期案例,探讨中国企业个人数据跨境传输中法律合规的最佳实践模式。At the era of Big Data and Internet of things(“IoT”),Chinese Companies frequently use client information to conduct data digging,analysis,advertisement and marketing.Among them,it includes mass personal information cross border transmission.At the same time,various countries or legal jurisdictions are emphasizing legislation of data protection such as GDPR of EU,however,the criteria of legislator attitude and legal requirements are different.Chinese companies are heavily involved in global economy.Facing this new data compliance challenges and pressure,how do we comply with laws and regulations required by different countries or jurisdictions,and meanwhile satisfying business demanding of companies,lowering business management risks become the issues to be resolved.This article analyzes laws and regulations to be effective and already taking effective in China,EU and United States of America,combined with practice experience,research typical application situation and latest cases,trying to discuss the best practice of personal information cross border transmission for Chinese Companies.

关 键 词：个人信息 数据合规 数据出境 中国企业数据出境 

分 类 号：D93[政治法律—法学]