欧盟《一般数据保护条例》对国际服务贸易规则的影响

为了保护隐私权,欧盟制定了《一般数据保护条例》(GDPR),保护个人数据和规范数据跨境流动是其两大目标。为了符合GDPR的要求,非欧盟企业客观上只有两种选择:要么撤出欧盟市场,要么将数据本地化,否则将面临巨额罚款。实际上,数据本地化构成了贸易壁垒,违反了《国际服务贸易总协定》第16和17条。为了促进数字贸易,以《全面与进步跨太平洋伙伴关系协定》(CPTPP)、《欧盟日本经济伙伴关系协定》(EPA)和《美墨加协定》(USMCA)为代表的新型区域贸易协定禁止数据中心本地化设置。为此,欧盟应设法消除任何数据本地化要求的可能性,同时应设法完善GDPR下的充分性决定机制。GDPR客观上对国际服务贸易规则产生了深远而广泛的影响。为了因应国际服务贸易规则的新发展,中国应引导与推动《服务贸易总协定》(GATS)的改进,加速构建促进个人信息保护、数据有序流动和保护公共利益相协调的新型数字贸易规则;借鉴欧盟与美国缔结的《隐私盾协议》,与欧盟开展有关数据跨境流动的双边协议谈判。

The Influence of General Data Protection Regulation on International Service Trade Rules

In order to protect privacy right,the European Union(EU)has developed General Data Protection Regulations(GDPR),whose two main objectives are to protect personal data and regulate the flow of data across borders.In order to comply with the GDPR,non-EU companies objectively have only two options:either pull out of the EU market or localize their data,otherwise they will face huge fines.In fact,requiring data localization constitutes a trade barrier and violates Articles 16-17 of General Agreement on International Trade in Services(GATS).In order to promote digital trade,new regional trade agreements such as the Comprehensive Progressive Trans-Pacific Partnership(CPTPP),the Agreement between the European Union and Japan for an Economic Partnership(EPA)and the United States–Mexico–Canada Agreement(USMCA)also prohibit data center localization.So,the EU should try to eliminate the possibility of any data localization requirements and perfect the adequacy decision-making system.GDPR has a profound and extensive impact on international service trade rules.In order to adapt to the new development of international service trade rules,China should guide and promote the improvement of GATS,accelerate the development of new digital trade rules that harmonize the protection of personal information,the orderly flow of data and the protection of public interest,and refer to the Privacy Shield Agreement to negotiate a bilateral agreement with EU on cross-border data flow.