关键词: 个人数据保护, 数据跨境流通, 单边性规制, 规则全球化

Abstract: The EU Personal Data Protection Law is not a specific law,but a general term for a legal system for the protection of personal data rights evolved and formed over decades of years.It has a self-contained evolutionary context,that is,from metaphysical human rights principles to regional directives at the rule level,then to the unified EU laws,and further developed to a personal data protection legal framework system with EU characteristics.The global circulation of information along with the popularization of Internet technology has produced the extensional power for EU’s personal data protection law.The internal jurisdiction rules that use the cyberspace have not yet formed a time window of international custom,it is trying to break through the principle of territory and continuously broadening the range of “domains”directly controlled by law and under its jurisdiction.As for the outside,i.e.,the so-called “domains”that cannot be directly governed,compliance obligations should be indirectly imposed on the legal standards of the places that data acquired and the overseas subjects that are not directly under the jurisdiction of the law through the formulation of supervision rules for the exit of personal data,thus the collection,processing and other related actions of the acquired personal data can be made to comply with EU regulations.The growth and the expansion path of EU Personal Data Law conforms to the development rules of international law rules that start from scratch,and it has even brought influences on the future global integration of personal data protection rules.

Key words: personal data protection, cross-border data flow, unilateral rules and regulations, globalized rules