Australia: Entry into force of Regional Comprehensive Economic Partnership including data transfer regulation (Article 12.15)

On 1 January 2022, the Regional Comprehensive Economic Partnership (RCEP) entered into force for ten original parties: Australia, Brunei Darussalam, Cambodia, China, Japan, Laos, New Zealand, Singapore, Thailand and Vietnam. The RCEP was signed by Australia, Brunei, Cambodia, China, Indonesia, Japan, South Korea, Laos, Malaysia, Myanmar, New Zealand, the Philippines, Singapore, Thailand, and Viet Nam. Chapter 12 of the RCEP regulates Electronic Commerce. In particular, Article 12.15 on Cross-border Transfer of Information by Electronic Means recognises that the parties may have their own regulatory requirements on the transfer of information by electronic means. However, the provision prohibits the parties from preventing cross-border transfer of information by electronic means where such activity is for the conduct of the business. Notwithstanding, the provision allows parties to (a) adopt or maintain measures necessary to achieve a legitimate public policy objective, provided that the measure is not applied in a manner which would constitute a means of arbitrary or unjustifiable discrimination or a disguised restriction on trade; or (b) measures necessary for the protection of its essential security interests. Cambodia, Lao, and Myanmar are not required to comply with obligations of the Article for a period of five years after the date of entry into force of the RCEP, with an additional three years if necessary. Viet Nam is not required to comply with obligations of the Article for a period of five years after the date of entry into force of the RCEP.