97国产超碰免费在线观看,午夜性久久久性久久久久,青青草青青视频免费观看,亚洲综合欧美另类尤物,插下面啊好爽快一点人妻少妇,一级黄色夫妻性生活又黄又猛又爽,日韩久区二区三区天天,大香蕉视频大香蕉视频,91精品天码美女少妇

數據資產作為要素驅動的跨境并購類交易將日益活躍，數據風險對盡職調查和交易估值亦提出了新的挑戰，對買方的數據接受能力的反向盡職調查已成為新特色，數據風險影響投資人的估值，數據轉移方案已成為并購交易文件主要新增的工作內容。

隨著人工智能技術不斷升級和應用，數據作為生產要素的經濟性特征越來越明顯，并滲透到社會體系各方面，世界上不同國家與地區之間都在對數據作為要素的產品和服務加以規范，并對隨之帶來的對個人隱私與自由的權利侵蝕予以保護。不同于中國有單獨的數據安全和個人信息保護立法體系，歐盟與英國對數據產品和服務的規范除了GDPR，主要是外商投資安全審查制度與反壟斷審查。本文將從跨境并購的角度入手，淺析中國的數據法律規范對涉及中國元素的跨境并購交易的影響。

在傳統的并購交易盡職調查中，我們一般只側重對賣方做全面的盡職調查，包括法律、財務和業務方面的盡職調查，而甚少對買方做反向盡職調查，通常對買方僅限于基本背景了解和財務購買能力的要求。但在中國的數據法律規范體系下，買方還需配合賣方做數據安全和隱私保護能力水平的評估，以確保在交易后，買方有能力承接和保護數據安全和個人隱私利益。 

根據《工信部工業和信息化領域數據安全管理辦法（試行）》（工業和信息化部2022年12月6日頒布），第22條 工業化信息處理者“因兼并、重組、破產等原因需要轉移數據的，應當明確數據轉移方案”。而制定數據轉移方案，不可避免需要對買方的數據承接能力做盡調。因此這是不同于傳統盡職調查工作中的數據特色。

對一個典型的跨境并購，交易各方可能受不同法域的有關數據安全與隱私的保護，不同的數據保護規范可能產生沖突。假設我們的交易賣方是歐盟的一家企業，買方是來自中國的買家，處理英國企業的數據存儲在歐盟境內，買方需要遵守歐盟的GDPR要求，將數據轉移給不在歐盟境內的中國買家時需要簽訂歐盟標準合同條款（SCC）。對于中國的買家來說，接受來自境外的信息和數據不屬于中國數據法律監管的范圍，只需要遵守歐盟標準合同條款，但根據GDPR的要求，仍需要配合歐盟的賣方提供符合歐盟SCC的有關信息和資料，如果涉及到中國買家的個人信息出境，還要依據具體情況簽訂中國個人信息出境標準合同或做數據出境安全評估。

歐盟的SCC與中國的SCC確有不兼容的地方，比如爭議的解決方式和適用法律。對于同時簽訂了歐盟的SCC與中國的SCC的英國買方或者中國買方來說，是否存在這兩種規范沖突呢？從規范內容上的確有沖突，但適用上沒有沖突，對于不同法域的數據監管要求，應以數據來源為基準判斷適用的規則。對于來自中國的數據，適用中國數據法律監管規定，對于來自歐盟的數據，適用歐盟的數據規則。

投資人會根據數據風險調整估值，數據安全與隱私保護合規水平高的企業會因此而增值，反之亦然。并購中涉及的數據轉移方案將是影響交易文件的主要新增內容。

此外，依據具體交易情況，數據風險將不同程度地影響交易交割條件設置、交割后義務、陳述與保證、賠償機制等條款。

Key Words: Cross-border M&A-type transactions driven by data assets are  becoming increasingly active. Data risk poses new challenges to due diligence and deal valuation. Reverse due diligence on the buyer's ability to take control of data has become a new feature, data risk affects investor valuations, and data transfer solution has become a major addition to M&A transaction documents.

With the continuous upgrading and application of artificial intelligence technology, the economic characteristics of data as a production factor are becoming more obvious and penetrating all aspects of the social system. Various countries and regions in the world have started to regulate the products and services of data as a factor and take actions to protect against the consequent erosion of individual privacy. China has separate legislation on data security and personal information protection, unlike the EU, which regulate data products and services mainly through the foreign investment security review system and anti-monopoly review, in addition to the GDPR. This article analyzes the impact of China's data legislation on cross-border M&A transactions involving Chinese elements, starting from the perspective of cross-border M&A.

Under traditional M&A transaction due diligence, we generally focus only on seller side for a comprehensive due diligence, which includes legal, financial, and operational due diligence. We seldom do reverse due diligence on buyer side, and usually limited due diligence on buyer to basic background and financial purchasing power. However, under the Chinese data legislation system, the buyer also needs to cooperate with the seller to assess its level of data security and privacy protection to ensure that the buyer is capable of undertaking and protecting data security and personal privacy interests after the transaction.

According to the Measures for Data Security Management in the Industrial and Information Technology Sector (for Trial Implementation) (issued by the Ministry of Industry and Information Technology on December 6, 2022), Article 22 provides that where a data processor in the industrial and information technology sector “needs to transfer data due to merger, reorganization, bankruptcy, or other reasons, it shall formulate the data transfer plan.” The formulation of a data transfer plan inevitably requires due diligence on the buyer's capacity to take over the data. This is therefore a distinctive feature from traditional due diligence work. 

For a typical cross-border M&A, the parties to the transaction may be subject to different jurisdictions' protection of data security and privacy, and there is a possible conflict of laws on different data protection laws. Assuming that the Seller of our transaction is a company in the EU and the Buyer is from China, and the data of a UK company, processed by the Seller, is stored in the EU. The buyer needs to comply with the requirements of the EU GDPR. To transfer the data to the Chinese Buyer outside of the EU, the Chinese buyer needs to sign the EU Standard Contractual Clause (SCC). For the Buyer, receiving information and data from outside China does not fall under the jurisdiction of Chinese data law, thus the Buyer generally only needs to comply with the EU SCC. However, even according to GDPR, the Chinese Buyer needs to cooperate with the EU Seller to provide relevant information and data to show its capacity to comply with the EU SCC, and if the personal information controlled by the Chinese Buyer is involved and needs to be transferred outside of China, then based on the specific situation, the Chinese Standard Contract for Cross-border Transfer of Personal Information (China SCC) or the Security Assessment of Outbound Data Transfers should be handled. 

There are indeed incompatibilities between the EU SCC and the Chinese SCC, such as dispute resolution and applicable law. For a UK buyer and a Chinese buyer, both of whom have signed both the EU SCC and the Chinese SCC, will there be a conflict between the two SCCs? Indeed, there will be conflicts regarding the content of the two SCCs; however, no conflicts will be found regarding the applicability of the SCCs. For data regulatory requirements in different jurisdictions, the applicable rules should be determined based on the source of the data. As such, for data from China, the Chinese data law applies; for data from the EU, the EU data law applies.

Investors will adjust valuations based on data risk revealed through a due diligence. As a result, companies with sound  data security and privacy protection compliance systems will be given extra value, and vice versa. 

The data transfer solution involved in a M&A will be a major addition that will affect the transaction documents. In addition, depending on the specific transaction, data risks will affect, to varying degrees, the terms and conditions precedent to completion, post-completion obligations, representations and warranties, indemnification mechanisms, etc.