Cross-Border Data Transfer
What is Cross-Border Data Transfer?
The movement of personal data from one jurisdiction to another. Cross-border transfers are regulated under GDPR, LGPD, and other privacy laws and typically require adequate safeguards such as Standard Contractual Clauses or Binding Corporate Rules.
Terms that appear alongside cross-border data transfer
Each of these is named in at least one of the same controls as cross-border data transfer. The number is how many controls name both.
- consent 6 shared controls
- certification 6 shared controls
- standard contractual clauses 6 shared controls
- binding corporate rules 6 shared controls
- gdpr 5 shared controls
- authorisation 5 shared controls
- data subject 5 shared controls
- cybersecurity 4 shared controls
Frameworks that govern cross-border data transfer
What the standards actually require on cross-border data transfer
Requirements naming cross-border data transfer across 6 standards, quoted from the control text.
Store personal data, financial data, government data, and CII operational data on servers physically located in Myanmar per data localisation provisions in the 2025 Cybersecurity Law and supporting regulations.
MMCL-4 · Data Localisation and Cross-Border Data Transfer Controls →Personal data may be transferred abroad only if the destination ensures an adequate level of protection or where contractual safeguards, binding corporate rules, or other approved mechanisms apply.
CH-FADP-07 · Cross border data transfers →Article 19.11: no Party may prohibit or restrict the cross-border transfer of information, including personal information, by electronic means for the conduct of a covered person's business (covered investments, investors and service suppliers of a Party, excl...
usmca-chapter-19-digital-trade-united-states-mexico-canada-agreement::Art. 19.11 · Do not prohibit or restrict cross-border data transfers for a covered person's business, except necessary and proportionate public policy measures →Georgia DPL EU + Council of Europe context + 2024-2025 pipeline. EU CANDIDATE STATUS: Georgia granted EU CANDIDATE COUNTRY status December 2023 (subject to ongoing reforms + political conditions including democratic backsliding concerns 2024-2025);
GeDPL-EU-CoE-Status-2024-2025 · EU-Accession Status, CoE Convention 108+ and 2024-2025 Pipeline →Section 33 PDPO restricting cross-border transfer of personal data to places outside Hong Kong has been enacted in 1995 but is the only PDPO section not yet brought into force (over 28 years).
HK-PDPO-CrossBorder-Section-33-PCPD-Guidance-Coord-China · HK PDPO Cross-Border Transfer - Section 33 (not yet in force) + PCPD 2022 Cross-Border Guidance + Recommended Model Contractual Clauses + China PIPL Coordination →Security Dimension 8 Privacy per X.805 Clause 6.8: Privacy shields what could be inferred by watching activity on the network, for example websites visited by users + their geographic location + the IP addresses and DNS names assigned to devices inside a provi...
X805-Dim8-Privacy-Identification-Network-Activity-Personal-Information-Confidentiality · ITU-T X.805 Security Dimension 8 - Privacy + Identification of Network Activity + Personal Information Confidentiality + Subscriber Anonymity + Pseudonymity + Anti-Tracking + Location Privacy + Data Minimization + GDPR/CCPA Alignment →Questions people ask about cross-border data transfer
What is Cross-Border Data Transfer?
Why is Cross-Border Data Transfer important for compliance?
Which compliance frameworks address Cross-Border Data Transfer?
Where can I learn more about Cross-Border Data Transfer?
See how Cross-Border Data Transfer applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.