数据资产交易风险的法律规制研究

Research on the Legal Regulation of Data Asset Transaction Risks

摘要: 数据资源作为重要生产要素，蕴藏了巨大的价值。随着当前数据交易的规模不断扩大，不可避免地存在这几种风险问题：一是侵权风险，二是合规风险，三是技术风险，四是社会风险。目前，我国国家层面并没有专门针对数据资产交易风险的立法，结合域外国家数据资产交易法律规制的经验，我国正在积极地探索如何有效规避数据资产交易风险。本文对数据资产交易风险的立法原则和法律规制提出立法建议：第一，规定主体义务，加快制定数据分级分类标准，区分个人数据、公共数据、企业数据，并按照数据敏感程度进行分级，对不同数据根据相应标准进行交易；第二，利用区块链技术做好数据溯源工作，由企业对数据来源、数据授权行为进行区分和审查，隔离与排除侵权与合规风险；第三，由政府引导市场逐步建立合理定价机制；第四，设立数据交易监管机构，对数据来源、数据主体、数据客体、数据流通过程进行监管，并对数据交易主体实行严格的准入制度。

Abstract: As an important factor of production, data resources contain great value. With the continuous expansion of the scale of current data transactions, there are inevitably these kinds of risk problems: first, infringement risk, second, compliance risk, third, technical risk, and fourth, social risk. At present, there is no legislation specifically aimed at the risk of data asset transactions at the national level in China, and combined with the experience of legal regulation of data asset transactions in countries outside the region, China is actively exploring how to effectively avoid the risks of data asset transactions. This paper puts forward legislative suggestions on the legislative principles and legal regulation of data asset transaction risks: First, stipulate the obligations of subjects, accelerate the formulation of data classification standards, distinguish between personal data, public data, and enterprise data, and classify according to the degree of data sensitivity, and trade different data according to corresponding standards; Second, use blockchain technology to do a good job in data traceability, and enterprises will distinguish and review data sources and data authorization behaviors, and isolate and eliminate infringement and compliance risks; Third, the government should guide the market to gradually establish a reasonable pricing mechanism; Fourth, establish data transaction regulatory agencies to supervise data sources, data subjects, data objects, and data circulation processes, and implement a strict access system for data transaction entities.