Legal Aspects of Personal Data Protection in Cross-Border Data Flows within Bilateral Comprehensive Trade Agreements
Keywords:
Personal Data Protection, Cross-Border Data Flows, Bilateral Trade Agreements, Digital Economy, Legal CertaintyAbstract
The rapid growth of the global digital economy has driven massive cross-border data flows, making data a highly valuable economic commodity. However, this phenomenon raises critical concerns regarding state sovereignty and the protection of personal data. This study examines the legal aspects of personal data protection within cross-border data flows under Bilateral Comprehensive Trade Agreements. Using a normative juridical research method with a statutory and comparative approach, this paper analyzes how bilateral trade agreements harmonize conflicting interests between trade liberalization and data privacy enforcement. The findings reveal that while comprehensive trade agreements increasingly include digital trade chapters to facilitate seamless data transmission, significant fragmentation remains due to differing national legal frameworks such as the stringent standards of the EU’s GDPR versus the more market-oriented approaches. This study concludes that to prevent regulatory loopholes and ensure legal certainty, future bilateral trade agreements must adopt robust adequacy decision mechanisms, mutual recognition principles, and clear dispute settlement clauses that treat data privacy not as a barrier to trade, but as a foundational element of digital trust.
Downloads
References
Aaronson, S. A. (2022). Data is different: Why the world needs a new approach to governing cross-border data flows. World Trade Review, 21(3), 395–411. https://doi.org/10.1017/S147474562100032X
Alstyne, M. V., & Brynjolfsson, E. (2021). The legal frameworks of digital trade: Balancing cross-border data flows and national privacy sovereignty. Stanford Law Review, 73(4), 899–942.
Azmeh, S., Foster, C., & Echavarria, M. (2025). Digital trade agreements and the global South: Negotiating data localization and privacy exceptions. Journal of International Economic Law, 28(2), 145–163. https://doi.org/10.1093/jiel/jgae012
Belli, L. (2024). Digital sovereignty and international trade: Harmonizing privacy and data mobility. Cambridge University Press.
Belli, L., & Mitchell, A. D. (2026). Digital sovereignty and international trade: Harmonizing privacy and data mobility. Cambridge University Press.
Burri, M. (2021). Data flows and international trade law: The modern governance of digital trade in bilateral treaties. German Law Journal, 22(5), 781–803. https://doi.org/10.1017/glj.2021.41
Bygrave, L. A. (2023). International data transfers and adequacy decisions: A normative critique of Western regulatory hegemony. International Data Privacy Law, 13(2), 85–98. https://doi.org/10.1093/idpl/ipac022
Chander, A. (2024). The coming internet duopoly: How the US and EU bilateral trade pacts are shaping global data governance. California Law Review, 112(3), 789–824.
Ciuriak, D. (2023). Data governance in comprehensive trade agreements: From CPTPP to DEPA. Journal of World Trade, 57(1), 29–56. https://doi.org/10.54648/TRAD2023002
Cory, N., & Dascoli, L. (2021). How data localization hurts the digital economy and international trade (Research Report No. ITIF-2021). Information Technology and Innovation Foundation.
Elsig, M., & Klotz, S. (2022). Data provisions in modern trade agreements: Introducing the TREND-Data dataset. International Journal of Data Science, 8(1), 12–34.
European Commission. (2025). Adequacy decisions and international data transfers in modern economic partnership agreements (Policy Report No. EC-2025-DP). EU Publications Office.
Fasan, O. (2023). WTO rules, digital trade, and cross-border data flows: The inadequacy of GATS Article XIV exceptions. Journal of International Commercial Law, 15(2), 211–239.
Gao, H. (2022). Across the great wall: E-commerce and data flow negotiations in the WTO and bilateral FTAs. Chinese Journal of International Law, 21(3), 485–513. https://doi.org/10.1093/chinesejil/jmac027
Greenleaf, G. (2024). Global data privacy laws: Progress amidst geopolitical fragmentation and bilateral comprehensive trade agreements. Computer Law & Security Review, 52(1), Article 105910. https://doi.org/10.1016/j.clsr.2024.105910
Greenstein, S., & Wu, T. (2026). Decoupling data: Assessing the limits of GATS Article XIV exceptions in algorithmic and generative AI disputes. Harvard Journal of Law & Technology, 39(1), 112–141.
Irion, K. (2021). Pushing buttons: The impact of digital trade chapters on the EU’s fundamental right to data protection. European Law Journal, 27(1-3), 88–109. https://doi.org/10.1111/eulj.12391
Kuner, C. (2023). International agreements and data privacy: Jurisdictional clashes in cyberspace. Oxford University Press.
Leblond, P. (2022). Digital trade treaties and data governance: A comparative analysis of US, EU, and Chinese models. International Negotiations, 27(4), 511–538. https://doi.org/10.1163/15718069-bja10052
Lopez-Gomez, R. (2024). Regulating cross-border data flows in Latin American FTAs: The balance between privacy and integration. Journal of World Investment & Trade, 25(2), 241–273.
MacDonald, E. R. (2025). Cross-border privacy rules (CBPR) vs. GDPR: The structural clash of mutual recognition in bilateral digital trade. International Data Privacy Law, 15(3), 201–218. https://doi.org/10.1093/idpl/ipad044
Mattoo, A., & Meltzer, J. P. (2021). International data flows and privacy: The role of trade agreements. World Development, 142, Article 105435. https://doi.org/10.1016/j.worlddev.2021.105435
Meltzer, J. P. (2023). The internet, data flows, and international trade law: Digital protectionism or legitimate regulation? Routledge.
Mitchell, A. D., & Mishra, N. (2022). Digital trade chapters in comprehensive economic partnership agreements: A new frontier for data sovereignty. Journal of International Trade Law and Policy, 21(1), 45–67. https://doi.org/10.1108/JITLP-10-2021-0056
Perez-Asinari, J. (2024). Extraterritorial enforcement of data privacy laws under the auspices of bilateral trade pacts. Columbia Journal of Transnational Law, 62(2), 315–358.
Streinz, T. (2021). Digital sovereignty beyond the state: The law of cross-border data flows. Michigan Journal of International Law, 42(3), 543–592.
Svantesson, D. J. B. (2024). Jurisdictional competence in cyberspace: Resolving enforcement gaps when personal data crosses borders. Journal of Cyber Policy, 9(2), 167–185.
Taylor, M. (2022). Public policy exceptions and digital trade: A judicial analysis of trade tribunal trends. Vanderbilt Journal of Transnational Law, 55(4), 921–955.
UNCTAD. (2025). Digital economy report 2025: Value and vanguards of cross-border data flows in developing nations. United Nations. https://unctad.org/publications/der2025
Voon, T. (2023). Security and privacy exceptions in digital trade: Lessons from recent free trade agreements. Melbourne Journal of International Law, 24(1), 115–142.
World Bank. (2021). World development report 2021: Data for better lives. World Bank Publications. https://openknowledge.worldbank.org/handle/10986/35215
World Trade Organization. (2026). The evolution of digital trade chapters in bilateral comprehensive economic agreements (WTO Working Paper Series No. ERSD-2026-05). WTO Secretariat.
Yakovleva, S. (2022). Privacy protectionism? Assessing the WTO consistency of EU restrictions on cross-border data flows. International & Comparative Law Quarterly, 71(3), 643–676. https://doi.org/10.1017/S002058932200021X
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 Iqbal shaukat
This work is licensed under a Creative Commons Attribution 4.0 International License.
Copyright and License Statement
Authors who publish their manuscripts in this Journal agree to the following conditions:
The copyright for any article in The International Journal of Law Review and State Administration is fully held by the author under a Creative Commons CC BY 4.0 license:
- The author acknowledges The International Journal of Law Review and State Administration (IJLRSA) has the right to publish for the first time with a Creative Commons Attribution 4.0 International License / CC BY 4.0.
- Authors can enter writings separately, arrange non-exclusive distribution of manuscripts that have been published in this journal into other versions (eg sent to the author's institutional repository, publication in a book, etc.), by acknowledging that the manuscript has been published for the first time in The International Journal of Law Review and State Administration (IJLRSA)
- The International Journal of Law Review and State Administration (IJLRSA) published under the terms of a Creative Commons Attribution 4.0 International License / CC BY 4.0. This license permits anyone to copy and redistribute this material in any form or format, compose, modify, and make derivative works of this material for any purpose, including commercial purposes, so long as they include credit to the Author of the original work.
