黄海瑛　何梦婷　冉从敬

摘   要：数据主权与国家安全、综合国力紧密相关，当前数据主权面临多重风险，如何保障数据主权安全、抵御主权安全风险成为国家发展亟待回答的关键问题。文章从数据全生命周期视角综合厘定数据主权在生成与存储、跨境流转、利用与服务、外部环境四层维度的风险，明晰数据主权现实保障需求与关键问题。在风险明晰的基础上，充分调研针对以上四层维度风险的国际数据主权治理实践，发现在实践中通常将数据生成与存储、跨境流转风险两维度同步治理，同时将此两维度与数据利用与服务、外部环境区分治理。由此总结以数据分级分类、充分性认定、“长臂管辖”等为核心的数据生成与存储、跨境流转维度治理路径，以数据实体与技术管辖、场景理论与风险评估等为核心的数据利用与服务维度治理路径，以国际合作、数据发展的网络攻击与数据霸权治理维度路径，并结合我国国情提出发展建议，力图为我国数据主权风險应对与实践路径探讨提供借鉴。

关键词：数据主权;数据主权风险;数据治理;数据对策;安全风险;国家安全;长臂管辖;跨境流动

中图分类号：D922.16   文献标识码：A   DOI：10.11968/tsyqb.1003-6938.2021053

Research on the International Governance System of Data Sovereignty Security Risk and Its References

Abstract Data sovereignty is tightly related to national security and comprehensive national power. Currently， data sovereignty faces multiple risks， and how to safeguard data sovereignty and resist sovereignty security risks has become a key question in need of urgent answers for national development. This paper， from the perspective of the full life cycle of data， comprehensively identifies the risks to data sovereignty in four dimensions， namely， data generation and storage， cross-border flow， utilization and services， and external environment， and clarifies the realistic needs and key issues in data sovereignty protection. On the basis of the clarification of risks， the international data sovereignty governance practices in respect of the four abovementioned dimensions of risks are fully investigated， and it is found that in normal practices， the two dimensions，  data generation and storage and cross-border flow risks， are governed simultaneously， while governed separately from data utilization and services and the external environment. Thus， three governance routes are suggested： that of data generation and storage， and cross-border circulation centered on data classification， adequacy determination， "long arm jurisdiction"， etc; that of data utilization and service centered on entity and technology jurisdiction， scenario theory，  risk assessment， etc.; and that of cyber attack and data hegemony centered on international cooperation and data development. Meanwhile， some development suggestions are drawn according to Chinas national conditions， in an attempt to provide some references for  the  countermeasures and routes in respect of data sovereignty risk governance.

Key words data sovereignty; data sovereignty risk; data governance; data response; security risk; national security;long-arm jurisdiction; cross-border flow

1   引言

信息时代下，数据价值凸显并成为国家战略储备资源，深入影响国家和社会发展，数据主权兴起并与国家安全、综合国力紧密关联。国际数据主权博弈日趋激烈，国际网络空间尚处丛林规则时代，在政治、经济等多重因素交叉影响下，数据主权安全风险更为多变与隐蔽，治理难度极大提升。……