Research note: framing the question
Cross-border data flows were once driven mainly by commercial efficiency. In recent years security considerations, industrial policy and geopolitical competition have intertwined, making “digital sovereignty” a shared rhetoric of legislation in many countries. Beneath the rhetoric lie highly divergent institutional choices: data localisation, outbound transfer assessment, extraterritorial application and mutual recognition arrangements coexist, and the cost of fragmented rules is passed on to multinational firms and smaller economies.
Four dimensions of rule competition
- Value ordering: whether privacy protection, security review or industrial development comes first — legislation gives different answers.
- Regulatory radius: which entities and which data types outbound rules cover, and how extraterritorial effect is defined.
- Regulatory mechanism: administrative licensing versus ongoing supervision, which directly shapes compliance costs.
- International mutual recognition: whether unilateral rules can be connected through adequacy decisions, multilateral frameworks or standards recognition.
The practical limits of coordination
In theory many coordination paths exist, from multilateral agreements to bilateral trusted data flow arrangements and convergence of technical standards. The practical constraints are equally clear: trust deficits, security concerns and industrial competition make comprehensive coordination unlikely in the short term. A more feasible middle route is “tiering by issue”: retain necessary restrictions in highly sensitive domains while promoting low-friction flows first in non-sensitive areas such as research and public health.
Further research
This note is part of the technology policy research line. Next we will compare data legislation in major economies article by article, produce a rule comparison table and keep it updated as an open resource.
Sources and version: this institutional research note draws on public laws, regulations and literature; cited rules follow the texts published by legislatures. Version v1.0 (2026-09).