个人数据保护法的域外效力研究  

A Study on the Extraterritorial Effect of Personal Data Protection Act

作　　者：张新新 ZHANG Xinxin

机构地区：[1]武汉大学国际法研究所、法学院

出　　处：《国际法学刊》2021年第4期124-145,158,共23页Journal of International Law

摘　　要：在个人数据保护领域,目前尚未形成统一的国际公约或习惯,各国在立法上扩大本国法的适用范围,尽可能将个人数据纳入本国管辖范围内。欧盟和美国立法为其他国家立法起到了参考和示范作用,立法中引入了设立机构标准、目标指向标准、居民标准及使领馆标准等扩展本国个人数据保护法的适用范围,最新立法中的管辖连结点值得借鉴和参考,但也可能引发域外效力冲突。从我国来看,为顺应大数据时代数字经济发展和保护个人数据的现实需要,我国《个人信息保护法》通过属地原则和效果原则规定了该法的适用范围,但仍存在不完善之处,应对相关法律规范进行解释,保证域外效力制度的运行,在维护个人数据安全和促进数据贸易之间寻求平衡。In the absence of international convention or custom in the field of personal data protection,States expand the scope of domestic laws and put personal data within their jurisdiction as far as possible.The legislation of the EU and the U.S.,which introduced establishment,targeting,resident and(embassies)consulate standards to extend the scope of personal data protection act,has played a reference and exemplary role for other countries.The connection points in the latest legislation are worth of reference,but they may also lead to conflicts of extraterritorial effect.From China’s perspective,in order to meet the actual needs of the development of the digital economy and the protection of personal data in the big data era,"Personal Information Protection Act"defines the scope through the principle of territoriality and effect,but there are still imperfections.Relevant regulations should be interpreted to ensure the operation of the extraterritorial effect system and seek a balance between maintaining personal data security and promoting data trade.

关 键 词：个人数据保护法 域外立法管辖权 属地原则 属人原则 效果原则 

分 类 号：D912.1[政治法律—宪法学与行政法学]