Regulating the Globalization of Data: Which Model Works Best?

These conditions are quite diverse and include the consent of the data subject, the use of specific legal mechanisms such as binding corpo- rate rules (BCRs), the compliance with specific codes of conduct, and the requirement for the destination country to have a data protection regime considered as “adequate”. [...] For data processing, this model is characterized by the presence of a comprehensive regime for per- sonal data protection, which includes the consent for data collection, and the extensive data subject rights such as the right to access, modify and delete data. [...] 5 ecipe policy brief — 9/2021 When considering the EU as one entity, the share of countries following the EU and US data model becomes almost equally widespread: 44 percent of the countries covered have the EU approach in place for cross-border data flows against 42 for the US model. [...] The share of digital services trade is based on the bilateral trade relationships of all exporters and importers having the same data model in place as a share of global digital services trade based on the 116 countries covered, excluding intra-EU trade. [...] The share of digital services trade is based on the bilateral trade relationships of export- ers and importers having the same data model in place as a share of global digital services trade based on the 116 countries covered, excluding intra-EU trade.