论数据保护法的域外效力

受信息技术挑战、多元价值冲突与国内外规则互动关系等多方面因素的影响，域外效力成为中国数据保护立法必须认真对待的法律问题。当前国际社会主要通过立法路径与司法路径扩张国内规则的适用范围，其中，司法路径一定程度填补了传统数据立法在域外效力问题上的缺失，但具有一定局限。当本国数据保护政策具有明显扩张需求时，立法有必要对域外效力问题作出直接宣示。直观来看，数据立法的适用范围取决于一国主权的自主选择，如果做全面考量，域外效力的确定仍然需要经过国际法层面的审视。考虑到数据保护政策与参与全球数据治理的需要，中国应在立法中确立域外效力条款，以设立机构标准和效果原则为基础对外适用数据保护规则。在实施阶段，应强化法院在适用域外效力规则中的作用，支持法院综合个案事实对中国数据保护立法的效力范围进行解释，从而与立法、行政机关之间形成良性互动，推动中国数据治理体系的构建。

The Extraterritoriality of Data Protection Law

Affected by many factors such as information technology challenges, multiple value conflicts, and the interaction between domestic and foreign rules, extraterritoriality of data protection law has become a legal issue that China must take seriously. At present, the international community mainly expands the scope of application of domestic data rules through legislative and judicial approaches. Among them, the judicial path fills in to a certain extent the lack of traditional data legislation on the issue of extraterritorial effectiveness, but it has certain limitations. Especially when the domestic data protection policy has obvious expansion needs, it is necessary for legislation to directly declare the issue of extraterritorial effectiveness. Intuitively, although the scope of application of data legislation depends on the independent choice of a country ’s sovereignty, the determination of extraterritoriality of data protection law still needs to be reviewed at the level of international law if all considerations are made. Taking into account China's data protection policy and the need to participate in global data governance, China should establish extra-territorial effectiveness clauses in legislation, and set the scope of application of the data protection law by utilizing established institution standards and effect criterion. In the implementation stage, the role of the court in applying the extraterritorial effectiveness rules should be strengthened, and the court should be supported to explain the scope of the effectiveness of China ’s data protection legislation based on the facts of individual cases, so as to form a benign interaction with the legislative and administrative authorities and promote the data governance system Construct.