域外管辖规则下的代表制度:欧盟GDPR的实践与启示  

The Representative System under the Extraterritorial Jurisdiction Rules: Practices and Enlightenment of the EU GDPR

作　　者：刘业 LIU Ye

机构地区：[1]厦门大学法学院 [2]厦门大学法学院网络空间国际法研究中心

出　　处：《武大国际法评论》2023年第6期76-95,共20页Wuhan University International Law Review

基　　金：国家社科基金项目“网络强国战略下数据资源的国际法规制研究”(18CFX087);福建省社科基金省法学会专项课题“私人主体参与数据治理的法律障碍及制度供给研究”(FJ2021TWFB05)的阶段性成果。

摘　　要：制定个人数据保护法的域外管辖规则已成为各国立法的共识,而代表制度作为域外管辖规则的制度衔接,专门解决未在境内设立实体的境外数据控制者或处理者的法律域外执行问题。欧盟GDPR在全球范围个人数据保护立法领域具有标杆地位,对其代表制度的研究可为中国提供有益经验借鉴。不容忽视的是,代表制度存在实践利用程度低、执法成本高、执法实效缺乏保障等实施困境。对此,可以探索通过培育代表的供需市场、适当增加代表的责任承担能力予以纾解。中国应当正确认识中欧代表制度的差异,在后续立法中明确代表制度的功能定位,细化代表的职责,通过多种路径共同保障个人信息保护法律域外执行的实效。The making of extraterritorial jurisdiction rules of the personal data protection laws are widely accepted by states, and following the extraterritorial jurisdiction rules, the representative system is a key mechanism to address the challenges of enforcing laws on data controllers or processors who have no establishment within the territory. The EU GDPR is a leading model for global personal data protection legislation, and its representative system can offer valuable insights for China. it can not be ignored that the representative system faces some implementation difficulties, such as low rate of utilization, high enforcement cost, and lack of guarantee for the effectiveness of enforcement. These can be mitigated by cultivating the representative's supply and market demand, increasing the representative's constructive liability appropriately to unlawful actions of data controller or processor. China shall recognize the differences with the EU's representative system, clarify the function and obligations of the representative system in future legislation, and cooperate with other approaches to ensure the effectiveness of the extraterritorial enforcement of personal information protection laws.

关 键 词：GDPR 域外管辖规则 代表制度 域外执行 

分 类 号：D99[政治法律—国际法学]