刘宏松、程海烨：跨境数据流动的全球治理：进展、趋势与中国路径(19)

[33]Court of Justice of theEuropean Union, “The Court of Justice Invalidates Decision 2016/1250 on theAdequacy of the Protection Provided by the EU-US Data Protection Shield,” July16, 2020,https://curia.europa.eu/jcms/upload/docs/application/pdf/2020-07/cp200091en.pdf.
[34]“长臂管辖”（long-arm jurisdiction）指《一般数据保护条例》（GDPR）第3条：适用于设立在欧盟内的控制者或处理者对个人数据的处理，无论其处理行为是否发生在欧盟内。参见The European Parliament and theCouncil, “General Data Protection Regulation,” Intersoft Consulting, May 2018,https://gdpr-info.eu/;Christopher Kuner,“Extraterritoriality and Regulation of International Data Transfers in EU DataProtection Law,”International Data PrivacyLaw, Vol. 5, No. 4,2014, pp. 235-245;刘天骄：
《数据主权与长臂管辖的理论分野与实践冲突》，《环球法律评论》2020年第2期，第180—192页。
[35]See EDPB, “Guidelines3/2018 on the territorial scope of the GDPR (Article 3),” November 12, 2019,https://edpb.europa.eu/our-work-tools/public-consultations/2018/guidelines -32018-territorial-scope-gdpr-article-3_en;and Peter Church, Caitlin Potratz, “U.S. Cloud Act and GDPR,” Linklaters, September13, 2019, https://www.linklaters.com/en/insights/blogs/digilinks/ 2019/september/us-cloud-act-and-gdpr-is-the-cloud-still-safe.