Regulation of Transborder Data Flows under ... - Tilburg University

Kuner/Regulation of Transborder Data Flows under Data Protection and Privacy Law 3
Table of Contents
Summary............................................................................................................................. 5
I. Introduction .................................................................................................................. 9
II. History and Overview of Transborder Data Flow Regulation.............................. 15
A. Definitions............................................................................................................. 15
B. Early regulation..................................................................................................... 15
C. International instruments ...................................................................................... 16
D. Regional instruments ............................................................................................ 18
E. National legislation ............................................................................................... 22
F. Voluntary and private sector mechanisms ............................................................ 23
G. Future directions ................................................................................................... 24
III. Issues and Analysis............................................................................................... 27
A. Legal nature of the various approaches ................................................................ 27
B. Geographically-based versus organisationally-based regulation.......................... 28
C. Compliance in practice ......................................................................................... 28
D. Differences in the ‘default position’ ..................................................................... 30
E. Risks and underlying policies ............................................................................... 30
F. Benefits of transborder data flows ........................................................................ 34
G. Role of legal harmonization.................................................................................. 35
H. Applicable law and jurisdiction ............................................................................ 36
IV. Conclusions and Recommendations ..................................................................... 39
A. Reconciling the geographical and organisational approaches .............................. 39
B. Determining the default regulatory position......................................................... 41
C. Evaluating underlying policies ............................................................................. 42
D. Reconciling applicable law and data transfer issues............................................. 42
E. Furthering regulatory efficiency ........................................................................... 43
F. Recognizing the importance of transborder data flows ........................................ 44
G. Increasing transparency ........................................................................................ 44
H. Areas for further work .......................................................................................... 45
Bibliography ..................................................................................................................... 47
Annex: Data Protection and Privacy Law Instruments Regulating Transborder Data
Flows................................................................................................................................. 55
A. International instruments (binding and non-binding) ........................................... 55
B. National data protection and privacy legislation in force ..................................... 61
C. Other important instruments ................................................................................. 85
D. Data protection and privacy legislation not yet in force....................................... 88