欧盟数据保护法的域外效力分析及对我国的镜鉴  

An Analysis of the Extraterritorial Effect of EU Data Protection Law and Its Revelation to China

作　　者：徐超[1] XU Chao

机构地区：[1]中国社会科学院信息情报研究院

出　　处：《中国政法大学学报》2025年第2期247-259,共13页Journal Of CUPL

基　　金：河北大学哲学社会科学培育项目“跨境数据流动法律规制问题研究”(2022HPY038)资助。

摘　　要：近年来,数据跨境流动的全球治理成为国际法治的重大理论和实践问题,世界主要国家和地区纷纷制定相关立法。欧盟在1995年《数据保护指令》中就设置了域外效力条款,2018年生效的《通用数据保护条例》又进一步扩大了域外效力的适用范围,突破了欧盟地域管辖的限制。欧盟数据保护法的域外效力,旨在实现欧盟标准与规范制定的“布鲁塞尔效应”,对全球的公、私部门都造成了较大影响,并成为不少国家评估制定相关法律的参照对象。深入分析欧盟数据保护法的域外效力问题,既有助于反对欧盟等地区和国家的过度域外管辖立法,又有助于阐释我国相关域外管辖立法的正当性,还有助于为相关国际立法行为提供中国方案。从法理、立法和司法的视角,结合立法规范、官方指南及经典案例,可分析出欧盟数据保护法域外效力适用的条件、存在的问题以及面临的挑战,并为完善《个人信息保护法》域外效力条款提供参考。In recent years,the global governance of cross-border data flows has become a major theoretical and practical issue in international rule of law,promoting major countries and regions in the world to introduce relevant legislation.In order to protect the rights of data parties in the EU,the EU established extraterritorial effect clauses as early as the 1995 Data Protection Directive,and the newest legislation taking effect in 2018,the General Data Protection Regulation(GDPR),expanded the scope of its extraterritorial application,surpassing the limits of EU territorial jurisdiction.The extraterritorial effect of the EU data protection law aims to achieve“Brussels effect”of the formulation of EU standards and regulations,which has had a great impact on both the public and private sectors around the world,and has become a target for countries to emulate when evaluating and formulating relevant laws.Research on the extraterritorial effect of EU data protection law will not only help oppose excessive extraterritorial jurisdiction legislation in the EU and other regions and countries,but also help explain the legitimacy of China’s relevant extraterritorial jurisdiction legislation.Additionally,such an analysis can contribute to the development of a Chinese perspective on international legislative practices.From the perspectives of legal theory,legislation and judiciary practice,combined with legislative provisions,official guidelines and classic cases,this article analyzes the conditions,existing problems and challenges faced by the extraterritorial effect of EU data protection law,and proposes to further improve the Personal Information Protection Law and its extraterritorial effect clauses.

关 键 词：GDPR 数据跨境 设立机构 目标指向标准 域外管辖 

分 类 号：D922.291[政治法律—经济法学]