数据隐私框架体系视角下数据跨境流动规则分析与中国启示
网络安全与数据治理
杨子硕
四川大学法学院
摘要： 欧盟与美国新近建立起包括数据隐私框架以及第14086号行政命令在内的数据跨境流动体系，填补了双边数据流动法律空缺。新体系通过修改规则细节以及引入双重救济机制，较以往协定更为完善，但仍存在数据保护审查法院独立性不足等制度性隐患。欧盟与美国在数据治理模式上一贯存在分歧，数据隐私框架体系充分展现出双方的谈判博弈，特别是在规则制度设计上的角力。欧美分立的数据治理政策显露出数据跨境流动规则并无定式，中国可借机探索并完善符合自身需求的数据流动规制路径，数据隐私框架体系的双边谈判策略及其展露的欧盟立场也可为中国参考，为未来中国与欧盟及其他国家开展数字合作提供良好借鉴。
中圖分類號：D99;TP309.2文獻(xiàn)標(biāo)識碼：ADOI:10.19358/j.issn.2097-1788.2024.08.012
引用格式：楊子碩.數(shù)據(jù)隱私框架體系視角下數(shù)據(jù)跨境流動(dòng)規(guī)則分析與中國啟示［J］.網(wǎng)絡(luò)安全與數(shù)據(jù)治理，2024，43（8）：69-75.
引用格式：楊子碩.數(shù)據(jù)隱私框架體系視角下數(shù)據(jù)跨境流動(dòng)規(guī)則分析與中國啟示［J］.網(wǎng)絡(luò)安全與數(shù)據(jù)治理，2024，43（8）：69-75.
Analysis of data cross-border flow rules from the perspective of Data Privacy Framework system and its implications for China
Yang Zishuo
Law School, Sichuan University
Abstract： The European Union and the United States have recently established a system of cross-border data flows, including the Data Privacy Framework and Executive Order 14086, which fills a legal gap in bilateral data flows. The new system is better than the previous agreement by revising the details of the rules and introducing a dual remedy mechanism, but there are still institutional pitfalls such as the lack of independence of the Data Protection Review Court. The EU and the U.S. have consistently disagreed on data governance models, and the Data Privacy Framework system fully demonstrates the negotiation game between the two sides, especially the tug-of-war over the design of the rule system. The separate data governance policies of the EU and the U.S. reveal that there is no set rule for cross-border data flows, and China can take this opportunity to explore and improve the path of data flow regulation that meets its own needs. The bilateral negotiation strategy of the Data Privacy Framework system and the EU′s stance on data privacy can also serve as a reference for China, and provide a good reference for China′s digital cooperation with the EU and other countries in the future.
Key words : Cross-border flow of data; Data Privacy Framework; Executive Order 14086; data governance; EU-U.S. game
引言
“棱鏡門”事件爆發(fā)后，《安全港協(xié)議》（U.S.-EU Safe Harbor Framework）和《隱私盾協(xié)議》（EU-U.S. Privacy Shield Framework）接連被歐盟法院宣布無效。隨后，美國和歐盟通過積極磋商就新的數(shù)據(jù)流動(dòng)規(guī)則即數(shù)據(jù)隱私框架（EU-U.S. Data Privacy Framework）達(dá)成協(xié)定，再次建立起雙邊數(shù)據(jù)流動(dòng)法律基礎(chǔ)。數(shù)據(jù)隱私框架及第14086號行政命令（Executive Order 14086）構(gòu)成了調(diào)整歐美數(shù)據(jù)跨境流動(dòng)的制度體系，新的體系在規(guī)則設(shè)置上展現(xiàn)出其先進(jìn)和完備的一面，然而通過回顧談判歷程、分析框架文本，不難發(fā)現(xiàn)數(shù)據(jù)隱私框架體系是歐美相互博弈妥協(xié)的產(chǎn)物，我們能從中一窺歐盟的數(shù)據(jù)規(guī)則取向，為未來中歐投資協(xié)定等國際協(xié)定中的數(shù)據(jù)跨境流動(dòng)規(guī)則談判提供寶貴經(jīng)驗(yàn)，也為我國發(fā)展出符合自身利益、具備自身特色的數(shù)據(jù)跨境流動(dòng)規(guī)則提供啟示。
本文詳細(xì)內(nèi)容請下載：
http://m.ihrv.cn/resource/share/2000006109
作者信息：
楊子碩
(四川大學(xué)法學(xué)院，四川成都610065）
此內(nèi)容為AET網(wǎng)站原創(chuàng)，未經(jīng)授權(quán)禁止轉(zhuǎn)載。