歐盟GDPR的域外效力：管轄依據、實施路徑、制度效應及啟示

The Extraterritorial Effect of EU GDPR: Jurisdictional Basis, Implementation Path, Institutional Effect and Enlightenment

從制度實踐考察，歐盟《一般數據保護條例》（GDPR）的域外效力對域外大型企業形成較有效規制，並引領國際社會相關立法趨勢，是近年來國內法域外適用方面一個較為成功的樣本。GDPR的域外效力以市場和價值觀為依託，通過國際法框架下對法律工具的高水平運用得以施行。就立法而言，GDPR在域外效力的擴張和限制之間非常謹慎地尋求管轄的合理邊界，力求確立管轄的正當性。就執法而言，基於對域外執法可行性的考量，歐盟通過多種途徑的國內和雙邊機制安排，促進GDPR域外效力的實施。面對域外執法中可能產生的正面法律衝突和阻礙，歐盟亦靈活務實、有所妥協。我國《個人信息保護法》已仿效GDPR的“目標主體”標準進行域外效力立法，目前的重點是儘快構建有效執法框架。我國應借鑒歐盟相關經驗，結合我國實際，做好配套執法措施的制度設計、明確執法思路、逐步建立長效跨境執法合作機制，為我國《個人信息保護法》域外效力的執行落地提供有力支撐。

From the perspective of institutional practice, the extraterritorial effect of the EU General Data Protection Regulation (GDPR) has formed a relatively effective regulation on large enterprises outside the EU, and led the relevant legislative trend of the international community. It is a relatively successful sample in the extraterritorial application of domestic law in recent years. The extraterritorial effect of GDPR is based on the market and values, and is implemented through the high-level application of legal tools under the framework of international law. As far as legislation is concerned, GDPR is very careful to seek the reasonable boundary of jurisdiction between the expansion and limitation of extraterritorial effect, striving to establish the legitimacy of jurisdiction. In terms of law enforcement, considering the feasibility of extraterritorial law enforcement, the EU has promoted the implementation of GDPR' s extraterritorial effect through various domestic and bilateral mechanisms and arrangements. In the face of possible head-on legal conflicts and obstacles arising from extraterritorial law enforcement, the EU has also been flexible, pragmatic and had some compromises. China's Personal Information Protection Law has followed the ''target subject'' standard of GDPR for extraterritorial effect legislation. The current focus is to build an effective law enforcement framework as soon as possible. We should learn from the relevant experience of the EU and combine the actual situation of our country to make the system design of law enforcement measures, clarify the idea of law enforcement, and gradually establish the mechanism of cross-border law enforcement cooperation, so as to provide strong support for the implementation of the extraterritorial effect of Personal Information Protection Law.