Download pdf
Research on the Compliance Path of Cross-border Data Flow under EU Law
- 1 Institute of LAW University Of Sheffield, Sheffield, UK
* Author to whom correspondence should be addressed.
Abstract
In an increasingly digitized global economy, the seamless transfer of data across national borders has become integral to facilitating international commerce, digital service delivery, and economic progress. This study critically examines the legal structure established by the European Union (EU) for regulating international transfers of personal data, emphasizing key aspects of the General Data Protection Regulation (GDPR). Recognized globally for its rigorous protection standards, GDPR's extraterritorial application and reliance on adequacy determinations have nonetheless intensified global regulatory divergence. Despite widespread adoption, compliance instruments such as Standard Contractual Clauses (SCCs) and Binding Corporate Rules (BCRs) encounter notable operational difficulties when navigating diverse international legal contexts. The study identifies key challenges—such as lack of international harmonization, enforcement barriers, and the disproportionate compliance burden on SMEs—and offers recommendations to enhance legal interoperability and policy convergence. Through comparative analysis and policy proposals, the paper calls for strengthened international coordination, global standardization of data transfer mechanisms, and integration of SCCs/BCRs into multilateral trade and governance frameworks. These efforts are essential for building a secure, transparent, and legally robust global data protection ecosystem.
Keywords
cross-border data transfers, regulatory fragmentation, EU data protection law, adequacy decision, privacy governance
[1]. Han, X., 'Paradigm Shift of European Union (EU) in Cross-Border Data Flow Supervision – From the Perspective of Digital Services Legislation' (2023) 13 Journal of WTO and China 69.
[2]. Chin, Y.-C. and Zhao, J.(2022)Governing Cross-Border Data Flows.https://doi.org/10.3390/laws11040063
[3]. Guamán, D.S.(2021)del Alamo, J.M. and Caiza, J.C., 'GDPR Compliance in Android Apps' IEEE Access. https://doi.org/10.1109/ACCESS.2021.3053130
[4]. Arroyo, V., Hess, K., Grünbaum, N. and Ribeiro, G. (2023) Policy Brief: What Specific Measures Could the US, the EU and China Take to Foster and Facilitate Cross-Border Data Flows?Comparative Approach to Big Tech Regulation.
[5]. Guamán, D.S., del Alamo, J.M. and Caiza, J.C., 'GDPR Compliance Assessment for Cross-Border Personal Data Transfers in Android Apps' (2021) IEEE Access. https://doi.org/10.1109/ACCESS.2021.3053130
[6]. Kong, L.(2010) 'Data Protection and Transborder Data Flow in the European and Global Context' 21(2) European Journal of International Law 441. https://doi.org/10.1093/ejil/chq025
[7]. European Commission, 'Adequacy Decisions' https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en accessed 30 January 2022.
[8]. Guamán, D.S., del Alamo, J.M. and Caiza, J.C. (2023) GDPR Compliance Assessment for Cross-Border Personal Data Transfers in Android Apps.Computers & Security,130,103262.
[9]. de Miguel Asensio, P.A. (2021) Cross-Border Data Transfers Between the EU and the U.S.Santa Clara Journal of International Law,19(2) , 1–45.
[10]. Zheng, W.(2020) Comparative Study on the Legal Regulation of Cross-Border Flow of Personal Data and Its Inspiration to China .Frontiers of Law in China, 15(3), 280–312.
[11]. Coche, E., Kolk, A. and Ocelík, V.(2024)Unravelling Cross-Country Regulatory Intricacies of Data Governance: The Relevance of Legal Insights for Digitalization and International Business. Journal of International Business Policy,7(1) , 112–127.
[12]. Court of Justice of the European Union, Schrems II Judgment, Data Protection Commissioner v Facebook Ireland Ltd and Maximillian Schrems, Case C-311/18, [2020] ECLI:EU:C:2020:559.
[13]. Jimenez-Gomez, B.S.(2021) Cross-Border Data Transfers Between the EU and the U.S.: A Transatlantic Dispute.Santa Clara Journal of International Law,19(2) ,1–45.
[14]. Reimsbach-Kounatze, C., Enhancing Access to and Sharing of Data: Striking the Balance between Openness and Control over Data (OECD, 2019). https://doi.org/10.5771/9783748924999-25 accessed 12 March 2025.
[15]. Zetzsche, D.A., Arner, D.W., Buckley, R.P. and Puschmann, T.(2021)DLT-Based Enhancement of Cross-Border Payment Efficiency – A Legal and Regulatory Perspective.Law and Financial Markets Review. https://doi.org/10.1080/17521440.2022.2065809 accessed 14 March 2025.
[16]. OECD Trade and Agriculture Directorate, 'Mapping Commonalities in Regulatory Approaches to Cross-Border Data Transfers' (2021) OECD Trade Policy Paper No. 248.
Cite this article
Gong,J. (2025). Research on the Compliance Path of Cross-border Data Flow under EU Law. Advances in Economics, Management and Political Sciences,181,65-74.
Data availability
The datasets used and/or analyzed during the current study will be available from the authors upon reasonable request.
Disclaimer/Publisher's Note
The statements, opinions and data contained in all publications are solely those of the individual author(s) and contributor(s) and not of EWA Publishing and/or the editor(s). EWA Publishing and/or the editor(s) disclaim responsibility for any injury to people or property resulting from any ideas, methods, instructions or products referred to in the content.
About volume
Volume title: Proceedings of the 3rd International Conference on Management Research and Economic Development
© 2024 by the author(s). Licensee EWA Publishing, Oxford, UK. This article is an open access article distributed under the terms and
conditions of the Creative Commons Attribution (CC BY) license. Authors who
publish this series agree to the following terms:
1. Authors retain copyright and grant the series right of first publication with the work simultaneously licensed under a Creative Commons
Attribution License that allows others to share the work with an acknowledgment of the work's authorship and initial publication in this
series.
2. Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the series's published
version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgment of its initial
publication in this series.
3. Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and
during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work (See
Open access policy for details).