生成式人工智能背景下的数据跨境流动安全规制问题

Security Regulation Issues of Cross-Border Data Flow in the Context of Generative Artificial Intelligence

摘要: 本文围绕生成式人工智能背景下的数据跨境流动安全规制问题展开讨论，从技术与数据流动的共生关系出发，分析了生成式人工智能在基础层、技术层与应用层中给跨境数据流动带来的合规性挑战，并分析了现行法律规制在应对新型风险时的不足。在此基础上，笔者提出应当构建起“双轨并行”的治理路径：国内层面应完善数据分类分级制度，建立覆盖全产业链的跨境数据监管体系；国际层面则需积极参与并引导全球规则制定，以实现技术创新与数据安全的有效平衡。

Abstract: This paper explores regulatory challenges for cross-border data flows in the context of generative artificial intelligence. Starting from the symbiotic relationship between technology and data mobility, it analyzes compliance challenges posed by generative AI at the foundational, technological, and application layers for cross-border data flows. It further examines the inadequacies of existing legal frameworks in addressing emerging risks. Building upon this foundation, the author proposes establishing a “dual-track” governance approach: domestically, refining data classification and grading systems while establishing a cross-border data supervision framework covering the entire industrial chain; internationally, actively participating in and guiding global rule-making to achieve an effective balance between technological innovation and data security.