摘要
个人数据保护标准是欧盟基本权利保护的制度体现。欧盟数据跨境传输规则和欧洲法院司法监管均以实现欧盟个人数据保护标准为要旨。数据传输的一般原则是针对出境数据的永久最低保护标准,充分性决定和标准数据保护条款是欧盟贯彻个人数据保护标准的法律工具。前者整体适用于特定国家,后者个别适用于特定商事主体,欧洲法院司法审查旨在实现对数据流动的全球监管。中国数据立法须全面研判欧盟数据保护立法模式的潜在风险,谨慎对待充分性决定、标准数据保护条款等具有欧盟特色的复杂法律工具,摆脱法律移植欧陆成文法的历史惯性,避免盲目借鉴《一般数据保护条例》而落入欧洲法院司法审查的长臂管辖。数据流动立法应全盘统筹个人数据与非个人数据流动立法方案,探寻价值中立规则以提供法律趋同新思路,引领数据立法的全球竞争。
The standard for personal data protection is the system embodying the EU’s protection for fundamental rights. The GDPR rules on international transfers of personal data and the CJEU’s judicial review both focus on the realization of the EU’s personal data protection standard. The general principle of data transfers is the permanent minimum protection standard for outbound data. Adequacy decisions and standard data protection clauses are the legal tools to apply the EU standard to specific countries and specific companies wholly or individually. For China’s data legislation,we should comprehensively analyze the potential risks of the EU model,be cautious of the standard data protection clauses,adequacy decisions and the other complex legal tools with EU characteristics,get rid of the historical inertia of legal transplantation of the European statutory law,and avoid blindly borrowing from the GDPR model and falling into the "long-arm"jurisdiction of the CJEU. As to China’s data flow legislation,we should take an overall consideration of the personal data and non-personal data flow legislation,explore value-neutral rules to provide new ideas for legal convergence,and take a lead in the global competition in data legislation.
出处
《欧洲研究》
CSSCI
北大核心
2021年第4期89-109,I0004,共22页
Chinese Journal of European Studies
基金
中国政法大学科研创新项目“《民法典合同编》数字合同的规则建构与理论难点”(项目编号:10818438)
中国政法大学民法学青年学术创新团队项目(项目编号:19CXTD01)
国家社会科学基金项目“数字经济时代的合同法制度更新与制度供给研究”(项目编号:17BFX195)。
