Digital Policy Alert logo

Governing cross-border data transfers

Receive thread updates:
All Threads
Share

Cross-border data transfers is one of the most salient topics in digital policy. Data flows lie at the heart of the global digital economy, but rules differ across jurisdictions. This thread collects all recent policy changes concerning cross-border data transfers.

Form of response

Excel

CSV

order
outline
law
investigation
105
55
52
46
Economic activity targeted Number of cases

Excel

CSV

cross-cutting
other service provider
digital payment provider (incl. cryptocurrencies)
platform intermediary: other
platform intermediary: user-generated content
infrastructure provider: internet and telecom services
software provider: other software
platform intermediary: e-commerce
ML and AI development
messaging service provider
technological consumer goods
online advertising provider
search service provider
infrastructure provider: cloud computing, storage and databases
DLT development
infrastructure provider: other
streaming service provider
software provider: app stores
semiconductors
384
22
13
12
11
7
7
6
6
5
5
5
3
3
2
1
1
1
1

Explore timeline

Speed
23 Sep 1980
10 Mar 2025
10 Mar 2025
10 Mar 2025
Implementers

Excel

CSV

China
62
United States of America
62
European Union
57
United Kingdom
38
Japan
28
Republic of Korea
23
Singapore
21
Australia
15
Germany
13
Turkiye
12
Canada
11
Hong Kong
11
New Zealand
11
Philippines
10
France
9
Malaysia
9
Mexico
9
Norway
9
Switzerland
9
Vietnam
9
Argentina
8
Brazil
8
Chile
8
India
8
Italy
8
Indonesia
7
Ireland
7
Thailand
7
Austria
6
Belgium
6
Netherlands
6
Saudi Arabia
6
United Arab Emirates
6
Chinese Taipei
5
Costa Rica
5
Denmark
5
Finland
5
Iceland
5
Israel
5
Peru
5
Portugal
5
Spain
5
Uruguay
5
Colombia
4
Czechia
4
Estonia
4
G7
4
Lithuania
4
Nigeria
4
Poland
4
Sweden
4
Andorra
3
ASEAN
3
Greece
3
Hungary
3
Kenya
3
Latvia
3
Luxembourg
3
Macao
3
Russia
3
Rwanda
3
Slovakia
3
Ukraine
3
African Union
2
Albania
2
Brunei Darussalam
2
Cape Verde
2
Dominican Republic
2
Ecuador
2
El Salvador
2
Guatemala
2
Honduras
2
Liechtenstein
2
Malta
2
Nicaragua
2
Panama
2
Paraguay
2
Republic of Moldova
2
Sao Tome & Principe
2
Slovenia
2
AfCFTA
1
Algeria
1
Armenia
1
Azerbaijan
1
Bangladesh
1
Bermuda
1
Bosnia & Herzegovina
1
BRICS
1
Bulgaria
1
Cambodia
1
Croatia
1
Cuba
1
Cyprus
1
Ethiopia
1
G20
1
Georgia
1
Global Privacy Assembly Members
1
Kazakhstan
1
Kyrgyzstan
1
Lao
1
Latin America and the Caribbean
1
Macedonia
1
Malawi
1
Mauritius
1
Monaco
1
Montenegro
1
Myanmar
1
Namibia
1
OECD members
1
Pakistan
1
Romania
1
San Marino
1
Serbia
1
Somalia
1
South Africa
1
Tajikistan
1
Turkmenistan
1
Uzbekistan
1

Case details

Excel

CSV

10 Mar 2025
under deliberation

European Union: Cross-border data transfer regulation in EU-Korea Digital Trade Agreement

10 Mar 2025
under deliberation
Republic of Korea and European Union concluded negotiations on digital trade agreement including cross-border data transfer regulation

On 10 March 2025, the European Union and the Republic of Korea finalised negotiations for a Digital Trade Agreement (DTA), which includes provisions o...

13 Dec 2023
under deliberation
Announced first round of negotiations for the Korea- EU digital trade agreement including cross-border data transfer regulation

On 13 December 2023, the Ministry of Trade, Industry and Energy announced the commencement of negotiations for the Korea-European Union digital trade ...

31 Oct 2023
under deliberation
Announced opening of negotiations on the EU-Korea digital trade agreement including cross-border data transfer regulation

On 31 October 2023, the European Commission Executive Vice-President and the Korean Minister for Trade, following the 11 meeting under the EU-Korea Tr...

06 Mar 2025
under deliberation

United Kingdom: Amendments to the Data (Use and Access) Bill including age requirement for social media

06 Mar 2025
under deliberation
Amendments to the Data (Use and Access) Bill including age requirement for social media were introduced into the House of Commons

On 6 March 2025, a member of the House of Commons tabled an amendment to the UK GDPR that would raise the age of consent for social media data process...

05 Mar 2025
processing consultation

India: Cross-border data transfer regulation in Digital Personal Data Protection Rules 2025

05 Mar 2025
processing consultation
Ministry of Electronics and Information Technology opened consultation on Digital Personal Data Protection Rules 2025 including cross-border data transfer regulation

On 5 March 2025, the Ministry of Electronics and Information Technology closes the public consultation on the draft Digital Personal Data Protection R...

03 Jan 2025
in consultation
Ministry of Electronics and Information Technology opened consultation on Digital Personal Data Protection Rules 2025 including cross-border data transfer regulation

On 3 January 2025, the Ministry of Electronics and Information Technology opened a public consultation on the draft Digital Personal Data Protection R...

26 Feb 2025
adopted

Norway: Data Protection Authority guidance on cross-border data transfer to United States of America clarifying the adequacy decision with European Union

26 Feb 2025
adopted
Data Protection Authority published guidance on cross-border data transfer to United States of America clarifying the adequacy decision with European Union

On 26 February 2025, the Norwegian Data Protection Authority published a guidance on cross-border data transfers to the United States of America (US)....

25 Feb 2025
adopted

Saudi Arabia: Data and Artificial Intelligence Authority risk assessment guideline for cross-border personal data transfers

25 Feb 2025
adopted
Data and Artificial Intelligence Authority published risk assessment guideline for cross-border personal data transfers

In February 2025, the Data and Artificial Intelligence Authority (SDAIA) published its "Risk Assessment Guideline for Transferring Personal Data Outsi...

21 Feb 2025
under investigation

Ireland: Data Protection Commission investigations into TikTok for alleged violations of GDPR data transfer provisions

21 Feb 2025
under investigation
Data Protection Commission submitted a draft decision regarding its investigation into TikTok to other concerned supervisory authorities

On 21 February 2025, the Data Protection Commission (DPC) submitted a draft decision under Article 60 of the General Data Protection Regulation (GDPR)...

14 Sep 2021
under deliberation
Announced investigation into TikTok for alleged violations of the GDPR data transfer provisions

On 14 September 2021, the Irish Data Protection Commission (DPC) initiated an investigation into TikTok personal data being transferred outside the Eu...

13 Feb 2025
concluded

Brazil: National Data Protection Authority assessment of data sharing adequacy decision between Ministry of Development and World Bank

13 Feb 2025
concluded
National Data Protection Authority declined adequacy decision on data sharing between Ministry of Development and World Bank

On 13 February 2025, the Brazilian Data Protection Authority (ANPD) denied a request to initiate an adequacy decision for the World Bank – Internatio...

30 Jan 2025
under deliberation
National Data Protection Authority initiated an adequacy decision on data sharing between Ministry of Development and World Bank

On 30 January 2025, the Brazilian Data Protection Authority (ANPD) initiated assessment of an adequacy decision for the World Bank – International Ban...

12 Feb 2025
in grace period

China: Cross-border data transfer regulation in Administrative Measures for Personal Information Protection Compliance Audit

01 May 2025
in force
Cyberspace Administration's Measures for Administration of Compliance Audits on Personal Information Protection including cross-border data transfer regulation enter into force

On 1 May 2025, the Cyberspace Administration of China (CAC)’s Measures for the Administration of Compliance Audits on Personal Information Protection ...

12 Feb 2025
in grace period
Cyberspace Administration released Measures for Administration of Compliance Audits on Personal Information Protection including cross-border data transfer regulation

On 12 February 2025, the Cyberspace Administration of China (CAC) released the Measures for the Administration of Compliance Audits on Personal Inform...

20 May 2024
adopted
Cyberspace Administration adopted Measures for Administration of Compliance Audits on Personal Information Protection including cross-border data transfer regulation

On 20 May 2024, the Cyberspace Administration of China (CAC) adopted the Measures for the Administration of Compliance Audits on Personal Information ...

02 Sep 2023
processing consultation
Closed consultation on Administrative Measures for Personal Information Protection Compliance Audit including cross-border data transfer measures

On 2 September 2023, the Cyberspace Administration of China (CAC) closed its consultation on the draft Administrative Measures for Personal Informatio...

03 Aug 2023
in consultation
Opened consultation on Administrative Measures for Personal Information Protection Compliance Audit including cross-border data transfer measures

On 3 August 2023, the Cyberspace Administration of China (CAC) opened a consultation on the draft Administrative Measures for Personal Information Pro...

12 Feb 2025
adopted

European Union: EU-Brazil Digital Dialogue

12 Feb 2025
adopted
EU and Brazil published joint statement following 13th Digital Dialogue

On 12 February 2025, the European Union (EU) and the Brazilian Government adopted a joint statement during the 13th Digital Dialogue in Brussels. The ...

21 Mar 2024
adopted
Adopted EU-Brazil declaration following 12th Digital Dialogue

On 21 March 2024, the representatives of Brazil and the European Union issued a joint declaration after the 12th Digital Dialogue. The parties noted t...

10 Feb 2025
adopted

Brazil: National Data Protection Authority and National Commission on Informatics and Liberty cooperation agreement on data protection and artificial intelligence

10 Feb 2025
adopted
Brazilian National Data Protection Authority and France’s National Commission on Informatics and Liberty announced cooperation agreement on data protection and artificial intelligence

On 10 February 2025, the Brazilian National Data Protection Authority (ANPD) and France’s National Commission on Informatics and Liberty (CNIL) declar...

10 Feb 2025
adopted

France: National Data Protection Authority and National Commission on Informatics and Liberty cooperation agreement on data protection and artificial intelligence

10 Feb 2025
adopted
Brazilian National Data Protection Authority and France’s National Commission on Informatics and Liberty announced cooperation agreement on data protection and artificial intelligence

On 10 February 2025, the Brazilian National Data Protection Authority (ANPD) and France’s National Commission on Informatics and Liberty (CNIL) declar...

08 Feb 2025
adopted

China: Shanghai Pilot Free Trade Zone and Lingang New Area Data Outbound Management List (Negative List) (2024 Edition)

08 Feb 2025
in force
Shanghai Municipal Internet Information Office issued Pilot Free Trade Zone and Lingang New Area Data Outbound Management List (Negative List)

On 8 February 2025, the Shanghai Municipal Internet Information Office, in collaboration with several municipal bodies, officially adopted the Negativ...

Showing 12 items per page
Page
1
2
...
65

We use cookies and other technologies to perform analytics on our website. By opting in, you consent to the use by us and our third-party partners of cookies and data gathered from your use of our platform. See our Privacy Policy to learn more about the use of data and your rights.