摘要： 生成式人工智能作为前沿技术突破的重要载体，其高效运转离不开多模态海量实时更新的数据支持。随着生成式人工智能蓬勃发展，跨境数据流动频率日益增加。生成式人工智能数据跨境流动带来经济价值与社会效益的同时，也存在一些法律风险:一是个人信息在跨境传输中可能面临泄露与滥用风险，二是对生成式人工智能产业产生负面影响的风险，三是数据跨境流动所引发的国家安全与数字主权风险。然而，当前生成式人工智能数据跨境流动相关法律体系和政策框架尚不完善。基于现有的监管体系，针对上述风险，从国内层面和国际层面提出治理对策建议，在国内，应进一步构建生成式人工智能数据跨境流动监管制度体系；在国际，应加强合作，推动数据跨境安全标准的互认，以期促进生成式人工智能数据跨境流动的可持续发展。

中图分类号：TP18; D922.17文献标志码：ADOI:10.19358/j.issn.2097-1788.2026.03.011
中文引用格式：宋延敏. 生成式人工智能数据跨境流动的法律风险与规制路径［J］.网络安全与数据治理，2026，45（3）：73-80.
英文引用格式：Song Yanmin. Legal risks and regulatory paths for crossborder flow of Generative AI data［J］.Cyber Security and Data Governance，2026，45（3）：73-80.

Legal risks and regulatory paths for crossborder flow of Generative AI data

Abstract： Generative Artificial Intelligence (AI), as a cuttingedge technology, is only possible due to the continuous and rapid updating of vast amounts of data. However, as Generative AI becomes more prevalent, the volume of crossborder data flows is increasing. The crossborder flow of Generative AI data brings economic value and social benefits, but also poses legal risks. First, personal information may face risks of leakage and misuse during crossborder transmission. Second, there is a risk of negative impacts on the generative AI industry. Third, crossborder data flows pose risks to national security and digital sovereignty. However, the legal and policy frameworks for crossborder data flows are not yet complete. This paper proposes some solutions to address these risks, both domestically and internationally, to ensure the sustainable development of crossborder data flows. Domestically, we should further establish a regulatory framework for the crossborder flow of generative AI data; internationally, we should strengthen cooperation to promote mutual recognition of crossborder data security standards.

Key words : Generative Artificial Intelligence; crossborder data flow; data sovereignty; legal regulation