跨境数据流动规制的公共利益保护:CPTPP与RCEP规则比较及中国因应  

Public Interest Protection and China's Response in the Regulation of Cross-border Data Flow:A Comparison of CPTPP and RCEP Rules

作　　者：王晶晶 张光[2] Wang Jingjing;Zhang Guang

机构地区：[1]西北政法大学国际法研究中心 [2]西北政法大学涉外法治研究中心

出　　处：《东南亚纵横》2023年第6期97-104,共8页Crossroads：Southeast Asian Studies

基　　金：国家社会科学基金重点项目“可持续发展及判例法引导下的新一代投资条约法的变革及对策问题研究”(21AFX024)的阶段性研究成果。

摘　　要：对于跨境数据流动法律规制,国际社会主要形成了“允许数据跨境自由流动+安全例外”的基本规制模式。数字鸿沟下各国跨境数据流动规制各异,但其共同核心在于对安全例外的解释。欧盟《通用数据保护条例》在如何平衡跨境数据流动和数据本地化存储关系时,选择了最符合欧盟利益的软数据本地化战略,用以对数据进行事实上的域外规制。不同形式的数据本地化规则协助各国平衡数据保护与数据自由流通。《全面与进步跨太平洋伙伴关系协定》(CPTPP)、《区域全面经济伙伴关系协定》(RCEP)等国际经贸协定中对于如何更好地平衡数据保护与跨境数据流动问题都有相关规制条款。RCEP赋予东道国较为全面的自主裁决权,CPTPP则在商业流通基础上添加了“合法公共政策目标例外”条款,矛盾焦点将聚焦在对“合法公共政策目标例外”的解释和适用上。各国对于“合法公共政策目标例外”有着不一样的阐释,不同形式的数据本地化协助各国平衡数据保护中东道国利益与数据自由流通的尺度。在多种不同的区域性规则将长期共存的局面下,中国亟须健全完善规范和促进数据跨境流动法律法规体系,在跨境数据流动法律规制中保障公共利益。In terms of the current basic model of"allowing cross-border free flow of data+security exceptions"formed by legal regulations on cross-border data flow,countries'cross-border data flow regulations vary under the formation of the digital divide,but the core of their seeking common ground lies in the interpretation of security exceptions.The EU's General Data Protection Regulations(GDPR)adopt the basic model described above.Among the core issues of GDPR,the EU has also chosen the soft data localization strategy that is most in line with the EU's interestsin order to effectively regulate data outside the territory.Different forms of data localization assist countries in balancing the interests of host countries in data protection and the free flow of data.International economic and trade agreements such as the Comprehensive and Progressive Agreement for Trans-Pacific PartnershipAgreement(CPTPP)and the Regional Comprehensive Economic PartnershipAgreement(RCEP)have relevant regulatory provisions on how to better balance data protection and cross-border data flows.RCEP gives the host country a relatively comprehensive right of autonomy while CPTPP adds an"exception for legitimate public policy objectives"clause on the basis of commercial circulation,and the contradiction focuses on the interpretation and application of"exception for legitimate public policy objectives",Countries have different interpretations of the"exception for legitimate public policy objectives",and different forms of data localization help countries balance the interests of the host country and the free flow of data in data protection.Finally,it is proposed that under the premise that regional regulations will coexist for a long time,China needs to further improve its legal system for cross-border data flow to safeguard China's interests in the field of legal regulation of cross-border data flow.

关 键 词：跨境数据流动 数据本地化 公共例外 CPTPP RCEP 

分 类 号：D99[政治法律—国际法学] D922.16[政治法律—法学]