个人信息保护法的域外效力探究
Study on the Extraterritorial Effect of Personal Information Protection Law

《个人信息保护法》第3条规定了域外效力条款，但是对于域外效力的具体实现，实践的经验与配套制度并不充分。域外效力条款首先会与本国的冲突适用法产生关联，在《个人信息保护法》的范畴以内，考虑到其公私法交融的属性，冲突法规范仍然具有适用的空间。域外效力条款其次与外国立法会面临直接的冲突，在数据主权意识普遍崛起与国际冲突频发的当下，缺乏国际层面的协调法律其实施会面临诸多问题。《个人信息保护法》对于不同类型的个人信息侵权案件，应当区分解决规范的域外效力问题。对于可能涉嫌侵害国家安全与公共利益的案件，仍由行政机关处理，但对于纯粹的侵害个人信息权益的案件，借由国际私法的方式解决会更为合适，这将有助于域外效力条款的有效实施。
Article 3 of the Personal Information Protection Law provides for the extraterritorial effect clause, but for the concrete realization of extraterritorial effect, the practical experience and supporting system are not enough. The extraterritorial effect clause will first be related to the conflict applicable law of the country. Within the scope of the Personal Information Protection Law, considering the nature of the integration of public and private laws, the conflict of law norms still have room for application. Secondly, the extraterritorial effect clause faces direct conflicts with foreign legislative councils. At present, the awareness of data sovereignty is generally rising and international conflicts are frequent, and the implementation of laws without international coordination will face many problems. For different types of personal information infringement cases, the Personal Information Protection Law should solve the extraterritorial effect of the standard. For cases that may be suspected of infringing on national security and public interests, it is still handled by the administrative organs, but for cases that are purely infringing on the rights and interests of personal information, it is more appropriate to solve them by means of private international law, which will help the effective implementation of the extraterritorial effect clause.