数据本地化存储的合法性问题极富争议。反对者认为其构成贸易壁垒，甚至还将破坏互联网全球互联互通的特性；支持者指出诸多国家已做出关于数据本地化存储的规定，其中，支持者不乏发达国家。实际上，从中外数据本地化存储实践出发，在抽象描述数据本地化存储的严苛度后，在以目的和手段之间的适当性和必要性为指导的基础上，可构建出一套“数据本地化存储合理界限理论”。从上述理论出发，本文检视《网络安全法》相关规定并给出基本评价，并以“数据本地化存储合理界限理论”为主体，最终提出数据跨境安全评估办法的总体框架。
Lots of controversies surround the legality of data localization. The report takes stock of current practices of data localization around the world and builds up a model of strictness for data localization measures. Then guided by the requirements of appropriateness and necessity between ends and means，this report construct a theory on the legitimate limits on data localization，and then establish a framework for security assessment on cross-border data transfers.
| Keywords： | Data LocalizationSecurity Assessment of the Cross-border Data TransfersLegitimate Limit on Data Localization |
