The Reparation Theory in European Union Damages Liabilities Cases: Challenges for Data Breaches

As data breaches often affect a large number of data subjects, the material and non-material damages sustained from the violations of the General Data Protection Regulation (GDPR) are staggering. Meanwhile, EU law lacks clarity on this subject. Previous EU case law has established the reparation theory to address issues relating to damages claims.

The Emerging Model for Harmonizing Cross-Border Data Transfer Laws: From the APEC’s to the Global CBPR Framework

Cross-border data transfer is a controversial topic in modern digital trade law due to the different positions of major economies. While several efforts to harmonize cross-border data transfer laws have been made in the multilateral or regional forum, real progress remains limited. In this chapter, I focus on an emerging model for promoting cross-border data transfer, the Global Cross-Border Privacy Rules (“CBPR”) Framework. I review and discuss CBPR’s design and features, including the soft-law nature, the public-private gatekeeper model, and the bottom-up approach.

Disciplining CBDCs: Achieving the Balance between Privacy Protection and Central Bank Independence

Central bank digital currency (“CBDC”) is a crucial FinTech development that aspires to overhaul the current payment system. In the wake of the COVID-19 pandemic, CBDCs' promises to reduce personal contact, facilitate socially desirable use of money, and initiate more targeted monetary measures have increased their popularity. In addition, CBDCs can potentially serve as a tool to internationalize a sovereign’s currency. World central banks, thus, have gradually formulated a consensus on structuring CBDCs, leaving the regulatory aspects of CBDCs deserving more attention.

Adequate Level of Data Protection and ADR in Cross-border Data Disputes — International Trade Law Perspective

Regulatory measures on cross-border data flows are essential to personal data protection laws. The General Data Protection Regulation (“GDPR”) of the European Union (“EU”) is one of such influential personal data protection regimes, which has become a model and has been adopted by many countries. The GDPR aims to ensure the protection of natural persons regarding the processing of personal data. To protect personal data outside the EU, the GDPR provides certain safeguards for its movement across the EU border.

Convergence on e-commerce: the case of Argentina, Brazil and MERCOSUR

E-commerce is growing rapidly in Argentina and Brazil, and in both countries the share of the population participating in e-commerce transactions exceeds the Latin American average. Both countries have established a legal framework for data protection, regulation of the internet, consumer protection, taxation of e-commerce, and contracts and e-signatures. Argentina and Brazil also have submitted proposals for negotiations over the treatment of e-commerce transactions in WTO Agreements, and included e-commerce provisions in free trade agreements (FTAs).