Legal issues of cross-border transfer of data

This thesis addresses the pressing legal challenges associated with cross-border data transfers, a critical aspect of the global digital economy. It explores the interplay between privacy, data protection, data sovereignty, and the regulatory conflicts arising from divergent national and regional legal frameworks. The research underscores the tensions between competing imperatives: safeguarding privacy as a fundamental right, ensuring national security, and facilitating unhindered global trade. Employing a comparative and doctrinal methodology, the thesis highlights the historical evolution of these frameworks, their philosophical underpinnings, and their implications for multinational corporations navigating overlapping compliance requirements. Key case studies, such as Schrems II, reveal the challenges of aligning extraterritorial privacy standards with the surveillance practices of third countries. The work also delves into the regulatory complexities introduced by emerging technologies, such as artificial intelligence, blockchain, and the Internet of Things, which exacerbate existing governance dilemmas and demand innovative solutions. The research critically evaluates existing mechanisms, including adequacy decisions, Standard Contractual Clauses (SCCs), and Binding Corporate Rules (BCRs), and identifies their limitations in addressing contemporary issues. Furthermore, the thesis explores multilateral initiatives, such as the Asia-Pacific Economic Cooperation (APEC) Cross-Border Privacy Rules (CBPR), and underscores their potential for harmonising fragmented regulatory landscapes. Ultimately, this study proposes a forward-looking governance model, balancing privacy, national sovereignty, and economic innovation. It advocates for foundational principles of interoperability, accountability, and adaptability, alongside practical steps such as leveraging privacy-preserving technologies and fostering institutional collaboration. By bridging regulatory gaps and aligning legal, technological, and geopolitical considerations, the thesis contributes to the development of sustainable, equitable cross-border data governance frameworks for the digital age.