DATA - Mapping Big Tech’s Global Deregulatory Demands for the Trump Trade Agenda
Download as XLS.
| Country | Issue | Regulation | Targeted by |
|---|---|---|---|
| Argentina | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection | US not recognized as providing adequate data protection, requiring additional safeguards to transfer data to US | Global Data Alliance (GDA) |
| Argentina | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Cloud Service Regulations | US not recognized as providing adequate data protection, requiring additional safeguards to transfer data to US; public sector lacks standard framework for cloud service procurement | Coalition of Service Industries (CSI) |
| Argentina | Domestic Production and Import Substitution; Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; DSTs and Other Taxes | Surcharge on foreign currency purchases and import of services; local conformity assessments; lack of standardised framework for cloud adoption by public sector; US not recognized as providing adequate data protection; taxation on online advertising services provided by non residents | Computer and Communication Industry Association (CCIA) |
| Argentina | Domestic Production and Import Substitution; Cloud Service Regulations; Privacy and Data Protection; Restrictions on Free Cross-Border Data Flows | US not recognized as a jurisdiction providing adequate protection of personal data; provincial taxes on digital services; no standardized framework for procurement of cloud services by government; import licensing system. | Information Technology Industry Council (ITIC) |
| Australia | Privacy and Data Protection; Anti-Monopoly Laws; AI Regulations | Backdoors can be demanded in encryption products under telecom law; digital platform inquiry by the Australian Competition Commision; proposals for new digital competition law and merger regulation; AI regulation | ACT, The App Association |
| Australia | Revenue Sharing; Anti-Monopoly Laws | Considering implementation of local content requirement for streaming services; proposed ex ante framework for digital competition similar to the DMA | Consumer Technology Association (CTA) |
| Australia | Revenue Sharing; Anti-Monopoly Laws; DSTs and Other Taxes | Proposals for local content obligations on streaming services; news media bargaining code; proposed ex ante competition regime for digital services; taxation of software related rights | Coalition of Service Industries (CSI) |
| Australia | Anti-Monopoly Laws; Regulation of Electronic Payments; Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows; Revenue Sharing; AI Regulations; DSTs and Other Taxes; Privacy and Data Protection | Proposals for ex ante competition regulation; proposal from central bank to regulate digital payment systems; cloud service regulations imposing restrictions on cross border data transfers; data residency and personnel requirements; proposals for local content requirements for online streaming services; revenue transfers to news providers from platforms; proposals to regulate high risk AI systems; GST on goods purchased online from overseas; royalty on delivery of software; legislative tools to force law enforcement assistance from tech companies; compliance obligations on critical infrastructure assets | Computer and Communication Industry Association (CCIA) |
| Australia | DSTs and Other Taxes; Revenue Sharing | Screen content requirement proposals; news media bargaining code: taxation on software royalties | Information Technology Industry Council (ITIC) |
| Austria | DSTs and Other Taxes | Proposal to introduce a DST | Digital Media Association (DIMA) |
| Austria | DSTs and Other Taxes | 5% DST implemented | ACT, The App Association |
| Austria | DSTs and Other Taxes | 5% DST implemented | Consumer Technology Association (CTA) |
| Austria | DSTs and Other Taxes | 5% DST implemented | Coalition of Service Industries (CSI) |
| Austria | DSTs and Other Taxes | 5% DST implemented | Computer and Communication Industry Association (CCIA) |
| Azerbaijan | Regulation of Electronic Payments | Requirement to use locally-developed instant payment systems | Coalition of Service Industries (CSI) |
| Bangladesh | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection | Restrictions on free cross border data transfers in data protection and data governance ordinances; data protection law has criminal liability and extraterritorial applicability; certain provisions of the data protection law not yet notified | Coalition of Service Industries (CSI) |
| Bangladesh | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection | Personal Data Protection Ordinance (PDPO) and the National Data Governance Ordinance (NDGO) imposes restrictions on cross border data transfers on certain classes of data | Computer and Communication Industry Association (CCIA) |
| Belgium | DSTs and Other Taxes | Plan to implement a DST by 2027 | Digital Media Association (DIMA) |
| Belgium | DSTs and Other Taxes | Plan to implement a 3% DST by 2027 | ACT, The App Association |
| Belgium | DSTs and Other Taxes | Plan to implement a 3% DST by 2027 | Consumer Technology Association (CTA) |
| Belgium | DSTs and Other Taxes | Plan to implement a 3% DST | Coalition of Service Industries (CSI) |
| Belgium | DSTs and Other Taxes | Plan to implement a 3% DST | Computer and Communication Industry Association (CCIA) |
| Bolivia | Restrictions on Free Cross-Border Data Flows | Restrictions on cross border data transfers of non-public government data | Global Data Alliance (GDA) |
| Bolivia | Restrictions on Free Cross-Border Data Flows | Restrictions on cross border data transfers for public sector (non-public government data to be stored domestically) | Coalition of Service Industries (CSI) |
| Bolivia | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations | Restrictions on cross border data transfers for public sector; physical inspection of cloud facilities | Computer and Communication Industry Association (CCIA) |
| Bolivia | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations | Restrictions on cross border data transfers for public sector; cloud service regulations by financial systems regulator | Information Technology Industry Council (ITIC) |
| Brazil | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; DSTs and Other Taxes | Regulations issued under Lei Geral de Proteção de Dados (LGPD - data protection law) includes conditions for cross-border data transfers; guidelines on government procurement of cloud services issued in 2018, 2021, 2023 include local server requirements and restrictions on cross border data transfers for federal government cloud computing; National Data Economy Policy under discussion, modelled on EUs Data Act, which could include data sharing and onshoring requirements | Global Data Alliance (GDA) |
| Brazil | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Revenue Sharing; Cloud Service Regulations; local incorporation and control; Anti-Monopoly Laws; Revenue Sharing; Domestic Production and Import Substitution; Local Testing and Certification; AI Regulations; DSTs and Other Taxes | Lei Geral de Proteção de Dados Pessoais (LGPD) restricts cross-border data transfers; local ownership and control requirements under a new digital sovereignty law; proposed digital competition regulation for platforms; restrictions on cross border data transfers of government data, expiring data governance models like EUs Data Act; local content requirements in ICT goods; non recognition of foreign conformity assessments; proposed AI regulations; DSTs; Proposal to expand telecom regulations to OTT services include revenue sharing norms such as contributions to network infrastructure | ACT, The App Association |
| Brazil | Anti-Monopoly Laws; Restrictions on Free Cross-Border Data Flows; Revenue Sharing; DSTs and Other Taxes; Local Testing and Certification; AI Regulations; Domestic Production and Import Substitution | Proposed digital competition regulation similar to DMA; restrictions on cross border data transfers, local content requirements for streaming; tax on platforms to fund local content development; proposal for DST; proposed AI regulation, certification requirements for data centers, proposal for network usage fees; Brazil is not party to the Information Technology Agreement (ITA) therefore tariffs on tech imports, strict regulation of import of ICT goods, | Consumer Technology Association (CTA) |
| Brazil | Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows | ANPD has taken steps to mitigate risks of barriers to cross-border data flows; regulations on government use of cloud services impose restrictions on cross border data transfers | Business Software Alliance (BSA) |
| Brazil | DSTs and Other Taxes; Revenue Sharing; AI Regulations; Anti-Monopoly Laws; Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Cloud Service Regulations; Domestic Production and Import Substitution; Regulation of Electronic Payments; DSTs and Other Taxes | Proposed tax on online streaming will be used to fund local content; requirements for domestic content; transparency obligations; in-country testing for telecoms; prohibition on import of refurbished ICT products; restrictions on use of roaming, proposed network usage fee; proposed AI regulation; proposed ex ante digital competition framework; restrictions on cross-border data transfers under the data protection law; proposed requirements for local ownership for companies providing IT services in Brazil; proposals to regulate non personal data; cloud service regulations impose restrictions on cross border data transfers of some data sets; import substitution for telecom equipment; regulations on data centers, electronic payment services; taxes on remittances made to foreign countries; proposals to tax digital services provided by foreign companies | Coalition of Service Industries (CSI) |
| Brazil | Domestic Production and Import Substitution; Cloud Service Regulations; Revenue Sharing; Privacy and Data Protection; AI Regulations; DSTs and Other Taxes | Taxes to promote local ICT products; spectrum allocation linked to use of local ICT products; preference to local ICT goods in public procurement; high tariffs on imported ICT goods, Brazil hasn't joined the ITA; local testing and certification requirements; pre-import certification of ICT products; no import of remanufactured goods | Telecommunications Industry Association (TIA) |
| Brazil | Anti-Monopoly Laws; Domestic Production and Import Substitution; Revenue Sharing; Privacy and Data Protection; AI Regulations; Restrictions on Free Cross-Border Data Flows; DSTs and Other Taxes; Regulation of Electronic Payments | Proposed digital competition bill modelled on DMA; enforcement of existing competition law against US platforms; import barriers and customs related problems; proposals for tax on online streaming services to fund local content; national certification requirements; data protection rules for children; proposals for network usage fees and USF contributions by tech platforms; regulation of data centers; proposed AI regulation; restrictions on cross-border data transfers in LGPD (Lei Geral de Proteção de Dados; data protection law) and proposals for a data economy act modeled on the EU's Data Act; taxes on MNCs, on ecommerce imports, remittances on payments made to foreigners and foreign transactions; regulation of Pix by Central Bank which acts as market regulator and participant | Computer and Communication Industry Association (CCIA) |
| Brazil | Local Testing and Certification; Domestic Production and Import Substitution; AI Regulations; Privacy and Data Protection; Revenue Sharing; Regulation of Electronic Payments; DSTs and Other Taxes | Several bills for DSTs proposed; Central Bank operates and regulates Pix;Telecom regulations being extended to OTT services and may include network usage fee; AI regulation purportedly stifles innovation, does not allow use of copyright material; Brazil has notified rules for cross-border data transfers, needs to quickly recognise more mechanisms for data exports; Domestic preference in public procurement; AI sovereignty proposals; Conformity assessments | Information Technology Industry Council (ITIC) |
| Cambodia | Domestic Production and Import Substitution; Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations; Privacy and Data Protection | Local testing requirements; restrictions on cross-border data transfers in draft cybercrime bill and draft cloud first policy; high compliance requirements under data protection law | Coalition of Service Industries (CSI) |
| Cambodia | Domestic Production and Import Substitution; Local Testing and Certification | Local testing requirements | Telecommunications Industry Association (TIA) |
| Cambodia | Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection | Restrictions on cross-border data transfers and local cloud solution requirements in proposed privacy nad cybersecurity regulations; data protection law | Computer and Communication Industry Association (CCIA) |
| Canada | Revenue Sharing | Online Streaming Act, 2023 imposes obligations for foreign streaming services with revenues over $25 million to contribute 5% of gross in country revenue to a fund set up to subsidize Canadian content | Digital Media Association (DIMA) |
| Canada | Revenue Sharing | Quebec Bill 109 - Promotes French language content | Digital Media Association (DIMA) |
| Canada | DSTs and Other Taxes; Privacy and Data Protection; Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations; AI Regulations | DSTs; Bill 64 (the Act to Modernize Legislative Provisions as Regards the Protection of Personal Information) restrictions on cross border data transfers in Quebec's privacy law; digital sovereignty provisions in proposed new federal privacy law; proposal for government data to be processed locally; need strong IP enforcement like US DMCA; AI regulation | ACT, The App Association |
| Canada | AI Regulations; Revenue Sharing | AI Act and Data Act; Quebec Bill 109 allows regulation of streaming services including local content requirements, registration requirements, discoverability requirements etc; Online streaming act requires streaming companies to subsidise Canadian content production also has local content and discoverability rules | Consumer Technology Association (CTA) |
| Canada | Domestic Production and Import Substitution; Cloud Service Regulations; Revenue Sharing; Privacy and Data Protection; AI Regulations; DSTs and Other Taxes | Canada prioritising domestic service providers; sovereign cloud system; online streaming act; Quebec bill about access to French content; proposed new data protection law allegedly has unclear provisions; AI regulation proposed; DSTs | Coalition of Service Industries (CSI) |
| Canada | Domestic Production and Import Substitution | Canada hasn't listed its largest government department under the WTO's Government Procurement Agreement | Telecommunications Industry Association (TIA) |
| Canada | Anti-Monopoly Laws; Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations; Revenue Sharing; Privacy and Data Protection; AI Regulations; DSTs and Other Taxes; Privacy and Data Protection | Proposed digital competition law; proposals for government data to be processed and stored in Canada; local content requirements for platforms; revenue sharing between platforms and news agencies and also platforms to subsidise local content production; AI regulation proposed; Quebec privacy law restricts cross-border data transfers; new data protection law being debated that restricts cross-border data transfers; DSTs; proposals for new law that would mandate backdoors to encryption | Computer and Communication Industry Association (CCIA) |
| Canada | Domestic Production and Import Substitution; DSTs and Other Taxes; Revenue Sharing; Privacy and Data Protection; Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations | Proposals for new data protection law will restrict AI training; Digital sovereignty provisions may affect cross-border data flows; Possible that government data will have to be processed domestically under new sovereign cloud service initiative; No exception for data mining in copyright law; Online news act and online streaming acts requires revenue sharing; DST not formally withdrawn; Canada first procurement policies for government | Information Technology Industry Council (ITIC) |
| Chile | Revenue Sharing | Ley Tommy Rey' regulation, which requires remuneration to performers (through a collective management organization) when their performances are made available to the public, claim that this requires double payments (once under contract/licensing payments and then again through this compulsory mechanism; claim that it violates A 17.7 of the US-Chile FTA) | Digital Media Association (DIMA) |
| Chile | Restrictions on Free Cross-Border Data Flows | Restrictions on cross border data transfers of critical and important banking data; contingency data centre to be operated in Chile | Global Data Alliance (GDA) |
| Chile | Restrictions on Free Cross-Border Data Flows | Restrictions on cross border data transfers of critical financial data for contingency purposes and alleged that exceptions are not broad enough | Consumer Technology Association (CTA) |
| Chile | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Regulation of Electronic Payments | New data protection regulation coming into effect and will require rules to be issued; financial centers to have local cloud backups; cybersecurity incident notification requirements are alleged to be onerous; foreign electronic payment services must get rules and schemes etc approved which apparently takes unreasonable time; new cybersecurity law could have barriers to trade eg - requiring local ID for registration or compliance reasons | Coalition of Service Industries (CSI) |
| Chile | Local Testing and Certification | Local testing requirements; local labelling requirements; local certification requirements | Telecommunications Industry Association (TIA) |
| Chile | Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection | Significant or strategic data of financial institutions to be hosted locally for contingency purposes; duplicates of payment data to be stored locally; data protection law imposes restrictions on cross-border data transfers | Computer and Communication Industry Association (CCIA) |
| Chile | Local Testing and Certification; Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Regulation of Electronic Payments | Labelling requirements for foreign devices; Restrictions on cross border data transfers for financial services; New data protection law allegedly raises compliance concerns and creates uncertainty; Mechanisms for cross-border data transfers not yet developed; Compliance requirements for electronic payments services | Information Technology Industry Council (ITIC) |
| Czechia | DSTs and Other Taxes | DST of 7% proposed | ACT, The App Association |
| Czechia | Restrictions on Free Cross-Border Data Flows | Restrictions on cross border data transfers for public administrative systems | Consumer Technology Association (CTA) |
| Czechia | DSTs and Other Taxes; Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows | DST proposal from 2019, but hasn't yet been adopted; cloud services require registration; proposed restrictions on cross-border data flows on public administrative systems | Coalition of Service Industries (CSI) |
| Czechia | Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows; DSTs and Other Taxes | Registration for cloud service providers; critical data of public agencies to be stored locally; proposed DST in 2019 - not enacted but not yet abandoned | Computer and Communication Industry Association (CCIA) |
| Colombia | DSTs and Other Taxes | Initially established as a 3% Significant Economic Presence Tax, now proposed to increase to 5% through a September 2025 law, reduced rates if local incorporation | Digital Media Association (DIMA) |
| Colombia | DSTs and Other Taxes; Revenue Sharing | DST; Revenue sharing regulations possible if OTT service providers are brought under telecommunications regulatory framework | ACT, The App Association |
| Colombia | DSTs and Other Taxes | Implementation and proposed expansion of DSTs, initially a significant economic presence tax now being increased, Reduced rate if the company has a local presence, this is alleged to violate the US-Colombia trade agreement | Consumer Technology Association (CTA) |
| Colombia | DSTs and Other Taxes; Regulation of Electronic Payments; Cloud Service Regulations; Revenue Sharing | Significant economic presence tax; electronic payment services - card systems are being discriminated against due to taxes on them but not newer electronic payment systems; cloud providers subject to registration; potential for network usage fee at some point of time; cloud procurement framework is allegedly unclear and preferences Huawei | Coalition of Service Industries (CSI) |
| Colombia | DSTs and Other Taxes | VAT exemptions don't apply to smartphones and certain other digital devices; no public consultation on rules; labelling and anti-theft requirements for mobiles | Telecommunications Industry Association (TIA) |
| Colombia | Cloud Service Regulations; Revenue Sharing; AI Regulations; DSTs and Other Taxes | Cloud service procurement by public sector allegedly biased towards domestic companies; proposals for OTT contributions to network development; proposed AI regulation will require permission from copyright holders for using data; DSTs | Computer and Communication Industry Association (CCIA) |
| Colombia | Cloud Service Regulations; Revenue Sharing; DSTs and Other Taxes; AI Regulations | Significant economic presence measures; Proposed AI law has a permission first approach for using copyrighted content; New registration and other requirements for cloud service providers; potential for network usage fee; Preference for local cloud solutions for government workloads | Information Technology Industry Council (ITIC) |
| Costa Rica | Regulation of Electronic Payments; DSTs and Other Taxes | Alleged to regulate extraterritorially by regulating inbound cross-border payments; cap on transaction fee for debit/credit cards; greater taxes on card systems than mobile payments | Coalition of Service Industries (CSI) |
| Costa Rica | Regulation of Electronic Payments | Regulation of inbound cross-border payments; Different regulatory obligations on local and foreign electronic payment suppliers. | Information Technology Industry Council (ITIC) |
| Croatia | DSTs and Other Taxes | Announced plans to implement a DST along lines of that in Austria | Coalition of Service Industries (CSI) |
| Croatia | Cloud Service Regulations; DSTs and Other Taxes | Procurement regulations for cloud preference EU suppliers; preference for state owned infrastructure; proposals for DST | Computer and Communication Industry Association (CCIA) |
| Cyprus | Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows | Procurement regulations increasingly specify EU managed cloud services; data sovereignty rules means sensitive data from the public sector and regulated industries, such as healthcare and financial data, cannot be taken out of the country | Coalition of Service Industries (CSI) |
| Cyprus | Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows | Data sovereignty rules require local processing of sensitive data such as health and financial records; public procurement framework requires local data residency | Computer and Communication Industry Association (CCIA) |
| EU | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Cloud Service Regulations | GDPR, Data Act and Data Governance Act would apparently benefit from simplification; data transfer tools are allegedly impractical and not sufficiently flexible; standard contractual clauses claimed to impose high burdens on companies due to the need to conduct transfer impact assessments; EU-US data privacy framework may continue to be challenged in EU courts and a review by the EC is due in 2027; Cybersecurity certification scheme for Cloud services (EUCS), latest draft removes sovereignty requirement but they can be imposed by local member state legislation; Cloud and AI Development Act and Quantum Act - aim to advance digital sovereignty, sovereignty criteria for public procurement included; EU Data Act - new requirements for data transfers, going beyond GDPR; data transfer provisions in trade agreements with 3rd countries - new provisions announced in 2024 but these still contain broad exceptions for privacy etc.; EU Health Data Space regulations impose restrictions on cross border data transfers | Global Data Alliance (GDA) |
| EU | Anti-Monopoly Laws; Privacy and Data Protection; Restrictions on Free Cross-Border Data Flows; DSTs and Other Taxes; Revenue Sharing; Cloud Service Regulations; AI Regulations | DMA; GDPR; DSTs; network usage fee; cloud security regulations; AI regulation | ACT, The App Association |
| EU | Anti-Monopoly Laws; Revenue Sharing; AI Regulations | DMA; DSA; AI Act; Data Act; proposals for internet infrastructure levy (similar to network usage fee) | Consumer Technology Association (CTA) |
| EU | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Cloud Service Regulations; Domestic Production and Import Substitution; AI Regulations | GDPR; Data Act; Data Governance Act; challenges to EU-US data exchange framework in court; standard contractual clauses require transfer impact assessments which are allegedly tough to do; cybersecurity certification scheme removed sovereignty provisions but allows member states to impose them; public procurement reform likely to include a Made in EU criteria; proposed Cloud and AI Development Act and Quantum Act will contain digital sovereignty provisions; Data Act has unclear provisions on data transfers; self-judging exception in cross-border provisions introduced by EC is a problem; Digital Operators Resilience Act may cast onerous compliance obligations (inspection and audit etc) | Business Software Alliance (BSA) |
| EU | Ai regulations; Privacy and Data Protection; Anti-Monopoly Laws; DSTs and Other Taxes; Revenue Sharing; Cloud Service Regulations; Domestic Production and Import Substitution; Regulation of Electronic Payments; Restrictions on Free Cross-Border Data Flows | Digital simplification process may discriminate against US companies by letting regulations on big entities stand; DMA; DSTs; local content requirements for large online platforms under 2024 European Media Freedom Act, this also requires payments to news producers; cloud service regulations - EUCS and CAIDA have sovereignty requirements; import substitution in strategic sectors; possible network usage fees; electronic payment services regulation is seeking to replace cards with instant payments; health data regulations restrict cross border data transfers; Data Governance Act/Data Act; DSA | Coalition of Service Industries (CSI) |
| EU | Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows; Domestic Production and Import Substitution | EUCS has country of origin requirements; standard setting processes exclude foreign participants; Data Act requires transfer impact assessments which allegedly set a high compliance burden; Data Act may restrict cross-border data transfers; preference for EU produced products in public procurement | Telecommunications Industry Association (TIA) |
| EU | Anti-Monopoly Laws; Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows; Revenue Sharing; AI Regulations; Privacy and Data Protection | DMA; proposal to extend data sharing mandate under open banking regulation to other financial services; EUCS and Cloud and AI Act proposed; de risking processes to reduce reliance on foreign cloud; sharing revenue with news providers; DSA; filtering obligations to protect IP; proposals for network usage fee; compliance burdens under AI regulations; GDPR restricts cross-border data transfers; Data Act and Data Governance Act; cybersecurity norms | Computer and Communication Industry Association (CCIA) |
| EU | Local Testing and Certification; AI Regulations; Cloud Service Regulations; Revenue Sharing; Anti-Monopoly Laws; DSTs and Other Taxes | Local standards and certification requirements, preference to local procurement in strategic sectors including cloud; compliance requirements under AI act including disclosures, cybersecurity certification and restrictions on cross border data transfers; Cloud policies may include restrictions on cross border data transfers; compliance requirements under DSA; compliance requirements under Digital Fairness Act; extending telecom regulations to OTT under digital networks act including possible network usage fee; data sharing mandates under Data Act and including possible restrictions on cross-border data transfers; DSTs implemented by many member states | Information Technology Industry Council (ITIC) |
| Ecuador | AI Regulations | Proposed AI regulation introduced by the data protection authority said to impose high compliance norms | Consumer Technology Association (CTA) |
| Ecuador | Regulation of Electronic Payments; AI Regulations | Tax regulation discourages adoption of cards; proposed AI regulations are said to be restrictive | Coalition of Service Industries (CSI) |
| Ecuador | AI Regulations | Human supervision, traceability standards, audit requirements amongst other requirements in proposed AI law | Computer and Communication Industry Association (CCIA) |
| Ecuador | AI Regulations | Compliance requirements under AI regulations including prohibitions on use of AI for real time biometric systems, synthetic content generation | Information Technology Industry Council (ITIC) |
| Egypt | Regulation of Electronic Payments; Privacy and Data Protection | Co-badge mandate for cards; local representative required; data protection law rules have not yet been notified so uncertainty | Coalition of Service Industries (CSI) |
| Egypt | Domestic Production and Import Substitution | Tariff and other fees on import of mobiles | Telecommunications Industry Association (TIA) |
| Egypt | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection | Restrictions on cross-border data flows under data protection law | Computer and Communication Industry Association (CCIA) |
| Ethiopia | Regulation of Electronic Payments | High fees charged to allow international payment networks to operate (get a license) | Coalition of Service Industries (CSI) |
| France | DSTs and Other Taxes | 5% DST | Digital Media Association (DIMA) |
| France | DSTs and Other Taxes; Privacy and Data Protection | DSTs | ACT, The App Association |
| France | DSTs and Other Taxes | October 2025, DST rate increased from 3 to 15% | Consumer Technology Association (CTA) |
| France | DSTs and Other Taxes; Revenue Sharing; Cloud Service Regulations | Recently doubled the DST rate, DST imposed since 2019; tax on online video content to enable local programming; proposals to tax online music streaming to subsidise local content; SecNumCloud cybersecurity certification scheme contains sovereignty provisions | Coalition of Service Industries (CSI) |
| France | Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows | NumSecCloud cybersecurity certification scheme has local ownership/incorporation requirements; restrictions on cross border data transfers | Telecommunications Industry Association (TIA) |
| France | Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows; Revenue Sharing; AI Regulations; DSTs and Other Taxes | Cloud certification NumSecCloud prefers local service providers; revenue transfers to news providers; public sector barred from using whatsapp, telegram and signal in favor of local equivalent; AI regulation; DSTs; taxes on online streaming to fund local content | Computer and Communication Industry Association (CCIA) |
| France | Cloud Service Regulations | NumSecCloud cybersecurity certification scheme has local ownership/incorporation requirements | Information Technology Industry Council (ITIC) |
| Germany | Anti-monopoly laws | Data sharing mandates under competition law | ACT, The App Association |
| Germany | Anti-Monopoly Laws | German competition authority regulates Big Tech | Consumer Technology Association (CTA) |
| Germany | DSTs and Other Taxes; Anti-Monopoly Laws | Proposal for a DST by an individual parliamentarian; ex ante competition regulation | Coalition of Service Industries (CSI) |
| Germany | Anti-Monopoly Laws; Revenue Sharing; DSTs and Other Taxes | Digital competition regulation under the Act Against Restraint of Competition which is similar to the DMA, proposals for streaming services to be taxed to fund local content development; NEtzDG law imposes content take-down requirements; DSTs proposed | Computer and Communication Industry Association (CCIA) |
| Greece | Cloud Service Regulations | Data centers used in projects funded by the government must sign up to EU environmental norms | Computer and Communication Industry Association (CCIA) |
| Hungary | Restrictions on Free Cross-Border Data Flows | State and local bodies providing essential services have restrictions on cross border data transfers; bodies processing such data but not incorporated in Hungary must have a local representative | ACT, The App Association |
| Hungary | Restrictions on Free Cross-Border Data Flows | Restrictions on cross border data transfers of State and local bodies and organisations providing essential services; local representative to be appointed by foreign organisations providing electronic information systems | Consumer Technology Association (CTA) |
| Hungary | DSTs and Other Taxes; Restrictions on Free Cross-Border Data Flows | Adopted several years ago but with a 0% rate, will increase to 7.5% at the end of 2025; data managed by state and local bodies to be processed locally (or EEA country if permitted by the data protection authority) | Coalition of Service Industries (CSI) |
| Hungary | Restrictions on Free Cross-Border Data Flows | Broad restrictions on cross border data transfers for public sector | Computer and Communication Industry Association (CCIA) |
| India | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Cloud Service Regulations | Restrictions on cross-border data transfers in policies on government owned weather data, M2m systems, payments regulations, rules under Digital Personal Data Protection Act; Digital Personal Data Protection Act provides broad powers to the government to restrict cross border data transfers; NDSAP makes it tough to export government owned data; RBI directive on payments; CERT in directions under IT Act require IT system logs to be stored domestically; SEBI cyber security rules require regulatory data to be stored in India; Framework for cloud services by SEBI regulated bodies - regulated entities that use cloud services to store and process data in prescribed servers; SEBI cloud framework; SEBI Saas Circular; RBI Master Direction on KYC; IRDAI Regulations; Meghraj Initiative; National Ecommerce Policy; Non personal data governance framework; restrictions on permanent IoT roaming and mandating local SIMs; India is pushing back on the moratorium on customs duties | Global Data Alliance (GDA) |
| India | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Anti-Monopoly Laws; DSTs and Other Taxes; Revenue Sharing; Privacy and Data Protection | Restrictions on cross border data transfers of various kinds; proposals for digital competition law; threats to use of strong encryption; data storage norms in personal data protection law; DSTs; Extension of telecom regulations to OTT services may include proposals for contributions to universal service fund | ACT, The App Association |
| India | Domestic Production and Import Substitution | Tariffs on import of ICT equipment; import licensing regime; import authorisation requirements | Consumer Technology Association (CTA) |
| India | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; DSTs and Other Taxes; Domestic Production and Import Substitution | Personal data protection act doesn't contain onerous terms for data transfers, but alleged that sectoral restrictions do - eg: payments; rules under the data protection act also introduce restrictions on cross border data transfers; expressed support for imposition of customs duties on electronic transmissions; restrictions on public procurement of foreign IT products and services | Business Software Alliance (BSA) |
| India | Privacy and Data Protection; Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations | Draft rules under Digital Personal Data Act have broad restrictions on cross border data transfers; Cert-in requires logs of IT systems to be stored in India; Restrictions on cross border data transfers of payments data, SEBI framework on cloud services restricts cross-border data transfers; insurance data to be stored in India; Meghraj Initiative restricts cross border transfers of government data; NDSAP restricts foreign sharing of weather data etc.; import substitution under Make in India program and preference for public procurement of locally sourced ICT products and services | Business Software Alliance (BSA) |
| India | Regulation of Electronic Payments; Restrictions on Free Cross-Border Data Flows; Anti-Monopoly Laws; Privacy and Data Protection; Source Code Disclosure; DSTs and Other Taxes; Cloud Service Regulations; Domestic Production and Import Substitution | NPCI get preferential treatment from government so foreign EPS providers suffer; Rupay and NPCI are de facto options for direct benefit transfers, various other rules claimed to be discriminatory such as market share cap; Restrictions on cross border data transfers of financial services data, insurance data; digital competition enforcement against AI tools of US companies and ex ante digital competition bill proposed; Restrictions on cross border data transfers under data protection rules; source code disclosure requirements in telecom; restrictions on cross-border transfer of geospatial data; taxes for foreign cloud service providers; import authorisation for certain ICT equipment; customs duties on IT products | Coalition of Service Industries (CSI) |
| India | Domestic Production and Import Substitution; Source Code Disclosure | Import duties on ICT goods; in country testing and certification; source code transparency as part of testing requirements for telecom products; preferential procurement of domestically produced ICT goods by government; restrictions on use of strong encryption; local certification processes | Telecommunications Industry Association (TIA) |
| India | Anti-Monopoly Laws; Domestic Production and Import Substitution; Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows; Revenue Sharing; Privacy and Data Protection; DSTs and Other Taxes | Proposed digital competition bill; CCI orders against Google Play store and Android; restrictions on import of ICT products; local quality certification requirements; local content requirements for cloud service provision; Indian companies given preferential access to geospatial data; Restrictions on cross border data transfers in various sectors; data protection law restricts cross-border data transfers; DSTs; restrictions on ecommerce; Proposals to extend telecom regulation to OTT services could include contributions to universal service fund | Computer and Communication Industry Association (CCIA) |
| India | Domestic Production and Import Substitution; Local Testing and Certification; DSTs and Other Taxes; Privacy and Data Protection; Restrictions on Free Cross-Border Data Flows; Revenue Sharing | Tax uncertainty and application of indirect taxes for cloud service providers; Powers to restrict cross border data transfers given to the government under data protection law; Local value add requirements for government procurement in cloud; Significant economic presence measure to enable taxation; Local testing and certification requirements; Proposals to extend telecom regulation to OTT services could require contributions to network development | Information Technology Industry Council (ITIC) |
| Indonesia | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Cloud Service Regulations; Domestic Production and Import Substitution | Duties on digital products withdrawn pursuant to agreement with US; Indonesia has agreed that US will get adequacy under Personal Data Protection (PDP) Law, but rules under this law haven't yet been notified; GR 71 - requires electronic system operators to register with government and provide access to law enforcement; Bank of Indonesia restricts export of data pertaining to core financial transactions; local content requirement for software; Restrictions on cross border data transfers for cloud services used in the financial sector | Global Data Alliance (GDA) |
| Indonesia | Restrictions on Free Cross-Border Data Flows; DSTs and Other Taxes; DSTs and Other Taxes; Anti-Monopoly Laws | Restrictions on cross border data transfers of various kinds; reporting requirement for import of certain electric transmissions allegedly in violation of ecommerce moratorium; DSTs; digital platform regulation like DMA proposed | ACT, The App Association |
| Indonesia | Restrictions on Free Cross-Border Data Flows; DSTs and Other Taxes; Privacy and Data Protection; Domestic Production and Import Substitution | Restrictions on imports valued below 100 USD; ecommerce platforms require a permit to operate locally, some platforms need to appoint a local representative; plans to expand the regulation under which restrictions on data exports are implemented: 5 broad categories of data to be restricted from exports; ecommerce moratorium violated; tariffs on import of ICT equipment; Restrictions on cross border data transfers of personal data by foreign ecommerce platforms; electronic transaction tax | Consumer Technology Association (CTA) |
| Indonesia | Restrictions on Free Cross-Border Data Flows; DSTs and Other Taxes | Restrictions on cross border data transfers in Government Regulation 71/2019, OJK Regulation; customs declaration requirements on cross-border electronic transmissions; draft Regulations concerning Electronic System Operators | Business Software Alliance (BSA) |
| Indonesia | Privacy and Data Protection; Domestic Production and Import Substitution; Restrictions on Free Cross-Border Data Flows | Duties on electronic imports (zero % for now, but reporting requirement exists); implementation rules for personal data law not announced; possible restrictions on cross border data transfers under Government Regulation 71/2019 which requires electronic systems to facilitate monitoring by law enforcement and domestic registration; Local content requirements for software; Restrictions on cross border data transfers involving financial data | Business Software Alliance (BSA) |
| Indonesia | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Revenue Sharing; Regulation of Electronic Payments; Domestic Production and Import Substitution | Restrictions on cross border data transfers to be extended to new categories; obligations under the Personal Data Protection Law (2020) including on cross-border data transfers; obligations under cybersecurity law; restrictions on export of financial services data; digital platform media taxes to pay local news; local settlement of electronic payment transactions; domestic ownership requirements for EPS; registration requirements for electronic system operators; import substitution | Coalition of Service Industries (CSI) |
| Indonesia | Domestic Production and Import Substitution; Restrictions on Free Cross-Border Data Flows; DSTs and Other Taxes | Local content requirements in ICT products; restricting imports; operators of public services to local data centers in Indonesia; e-commerce moratorium violated by import duties (zero) on digital products; high customs duties on ICT products | Telecommunications Industry Association (TIA) |
| Indonesia | Domestic Production and Import Substitution; Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Cloud Service Regulations; Revenue Sharing; DSTs and Other Taxes | Restrictions/tariffs on import of certain ICT goods; Restrictions on cross border data transfers including on privacy grounds; restrictions on use of foreign cloud; revenue transfers for news; data protection bill restricts cross-border data transfers; Ecommerce moratorium violated; ecommerce transactions taxes based on significant economic presence etc. | Computer and Communication Industry Association (CCIA) |
| Indonesia | Domestic Production and Import Substitution; Local Testing and Certification; Local Testing and Certification; DSTs and Other Taxes; Restrictions on Free Cross-Border Data Flows; Regulation of Electronic Payments; Privacy and Data Protection; Cloud Service Regulations; Revenue Sharing | Restrictions on foreign transfer of ecommerce data; De facto restrictions on cross border data transfers and local content requirements; Financial sector rules restrict cross border data transfers; Digital platforms required to pay local news organizations under 2024 law; Digital tax measures adopted in 2020; Proposed cybersecurity law has domestic testing and certification requirements; Data protection law limits cross-border data transfers; Restrictions on cross border data transfers in various sectors including electronic payments, public sector data, and proposals for various other categories of data (health, financial, immigration etc); Import declaration for intangible goods; Local standards certification required; Domestic content requirement for government procurement; Local testing and content requirements; No import of refurbished products. | Information Technology Industry Council (ITIC) |
| Ireland | Cloud Service Regulations | US cloud services precluded from government contracts | Computer and Communication Industry Association (CCIA) |
| Italy | DSTs and Other Taxes | 3% DST | Digital Media Association (DIMA) |
| Italy | DSTs and Other Taxes | 3% DST | ACT, The App Association |
| Italy | DSTs and Other Taxes | Comprehensive digital tax framework, 3% DST | Consumer Technology Association (CTA) |
| Italy | DSTs and Other Taxes; Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows | 3% DST since 2020; Restrictions on cross border data transfers by cloud service providers holding strategic data and supporting infrastructure for public administration and health services; Restrictions on cross border data transfers in education | Coalition of Service Industries (CSI) |
| Italy | Anti-Monopoly Laws; Cloud Service Regulations; ; Revenue Sharing; DSTs and Other Taxes | Competition regulation like DMA; restrictions on provision of cloud services to educational institutions; imposing telecom regulations on internet including network usage fees; DST | Computer and Communication Industry Association (CCIA) |
| Italy | Revenue Sharing | CDNs treated as electronic communications network may lead to them having to pay network usage fee | Information Technology Industry Council (ITIC) |
| Japan | Anti-Monopoly Laws; DSTs and Other Taxes; Cloud Service Regulations | Digital services taxes; subsidies for local cloud service providers; security regulations for cloud; restrictions on use of cloud for national security and defence purposes; private sector, foreign transport apps not allowed access to key infrastructure like airports | American Chamber of Commerce in Japan (ACCJ) |
| Japan | Anti-Monopoly Laws; AI Regulations | Digital competition regulation; AI regulation | ACT, The App Association |
| Japan | Cloud Service Regulations; AI Regulations | Cloud security regulations; AI regulation should ensure open access to Japanese training data held by NICT, for example under open data licenses; include AI companies on government councils | Business Software Alliance (BSA) |
| Japan | Anti-Monopoly Laws; Cloud Service Regulations; AI Regulations | Registration requirements for intermediaries; digital competition law; alleged that detailed information provision requirement to prevent Chinese companies casts onerous obligations; security clearance for private companies handling government data; security certification scheme for cloud; subsidies for frontier AI models | Coalition of Service Industries (CSI) |
| Japan | Anti-Monopoly Laws; Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; DSTs and Other Taxes | Competition regulation over big digital platforms enacted in 2020; 2024 law concerning competition in the mobile market ecosystem; Restrictions on cross border data transfers of data related to critical infrastructure, cyber threats, supply chain vulnerabilities; data protection rules under telecom business act; obligations under Act on the Protection of Personal Information regarding cross-border data transfers; new taxes on online platforms | Computer and Communication Industry Association (CCIA) |
| Kazakhstan | Anti-Monopoly Laws; Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection | Considering amendments to competition law to regulate digital platforms ex ante; restrictions on cross-border data transfers under data protection law; various other laws also require local hosting and local data retention | Computer and Communication Industry Association (CCIA) |
| Kenya | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; AI Regulations | Computer Misuse and Cybercrimes Act imposes restrictions on cross border transfers of data by critical systems; Data Protection Act empowers government to restrict exports of data sets that are deemed strategic or critical to national interest; Cloud policy gives preference to local cloud storage; AI regulations implemented recently | Global Data Alliance (GDA) |
| Kenya | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Cloud Service Regulations; Anti-Monopoly Laws | Restrictions on cross border data transfers under data protection regulations; restrictions on exporting sensitive data stored in cloud; draft digital competition law | ACT, The App Association |
| Kenya | Restrictions on Free Cross-Border Data Flows | Restrictions on cross border data transfers under data protection regulations of 2020 (not data protection act). | Consumer Technology Association (CTA) |
| Kenya | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Cloud Service Regulations; DSTs and Other Taxes | Restrictions on cross border data transfers of various classes of data; DSTs | Coalition of Service Industries (CSI) |
| Kenya | Anti-Monopoly Laws; Cloud Service Regulations; DSTs and Other Taxes | Proposal to amend competition law to regulate large digital companies; data protection act empowers the government to decide what data exports are permitted; Restrictions on cross border data transfers under ICT policy of 2020; Restrictions on cross border data transfers for critical infrastructure; public sector to favor government approved cloud services; DSTs and other taxes | Computer and Communication Industry Association (CCIA) |
| Kenya | DSTs and Other Taxes; Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations | Significant economic presence tax; Restrictions on cross border data transfers under critical infrastructure law and computer crimes law; Cloud policy requires local hosting of sensitive data | Information Technology Industry Council (ITIC) |
| Malaysia | Revenue Sharing; Anti-Monopoly Laws; AI Regulations | Network usage fee proposed; proposal for digital competition law; sovereign AI strategy | ACT, The App Association |
| Malaysia | AI Regulations; Regulation of Electronic Payments; Domestic Production and Import Substitution | AI sovereignty strategy; social media licensing; local digital payments systems purportedly enjoy preferential regulatory treatment; import substitution | Coalition of Service Industries (CSI) |
| Malaysia | Domestic Production and Import Substitution | Ban on import of refurbished products; import certification | Telecommunications Industry Association (TIA) |
| Malaysia | Domestic Production and Import Substitution; Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows; Revenue Sharing; AI Regulations | Use of local products for data centers; government-led cloud to be used for sensitive workloads of public sector; revenue sharing for news producers; data centers, cloud providers and social media to be regulated by telecoms regulator; AI regulation | Computer and Communication Industry Association (CCIA) |
| Malaysia | Revenue Sharing; AI Regulations; Restrictions on Free Cross-Border Data Flows | Local content requirements with local hardware required for business licenses; licensing and other obligations for social media and cloud; Contribution to USF by cloud and other service providers; AI strategy has strict requirements for data residency and operational flows, particularly for government data | Information Technology Industry Council (ITIC) |
| Mexico | DSTs and Other Taxes | Mexico's Value Added Tax law allows telecom carriers to block access to foreign digital services if they have not adhered to local tax laws (local representative, electronic certification, remitting tax); Proposals to amend Mexico's Federal Fiscal Code to allow authorities real time continuous access to platform level data, failing which the platforms can be blocked | Digital Media Association (DIMA) |
| Mexico | Restrictions on Free Cross-Border Data Flows; Regulation of Electronic Payments | Alleged de facto restrictions on cross border data transfers due to to recent fintech regulation, need a local backup cloud for e payments providers; Financial regulations also impose restrictions on cross border data transfers to aid in disaster recovery; Kill switch which allows government to block data transfers if taxes not paid. | Global Data Alliance (GDA) |
| Mexico | Restrictions on Free Cross-Border Data Flows; Regulation of Electronic Payments | Proposal under new value added tax law to allow tax administration system real time access to digital service provider systems, non-compliance can lead to blocking; electronic payments institutions to have multiple data centers in case of disaster - allegedly amounts to de facto restriction on cross border data transfers | Consumer Technology Association (CTA) |
| Mexico | Regulation of Electronic Payments; DSTs and Other Taxes; Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations | Mexico not complying with USMCA obligations related to EPS; tax surveillance tools and disconnections; de facto restrictions on cross border data transfers for electronic payment services | Coalition of Service Industries (CSI) |
| Mexico | Local Testing and Certification | Local testing requirements; labelling requirements | Telecommunications Industry Association (TIA) |
| Mexico | Domestic Production and Import Substitution; Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations; DSTs and Other Taxes | Tariffs on various imports; electronic payment system operators to keep backups of data locally; cloud regulations; taxation of digital products and services | Computer and Communication Industry Association (CCIA) |
| Mexico | Domestic Production and Import Substitution; Local Testing and Certification; Regulation of Electronic Payments; Source Code Disclosure | In-country testing and certification norms; National treatment and market access obligations for electronic payments systems not being adhered to; Proprietary software vendors to provide source code as a condition for contracting; New tax surveillance tools; Electronic payment systems to maintain business continuity plan that amounts to a de facto restriction on cross border data transfers | Information Technology Industry Council (ITIC) |
| Malta | Restrictions on Free Cross-Border Data Flows | Mirroring of essential regulatory data for gaming | Coalition of Service Industries (CSI) |
| Malta | Restrictions on Free Cross-Border Data Flows | Mirroring of essential regulatory data for gaming | Computer and Communication Industry Association (CCIA) |
| Nepal | DSTs and Other Taxes; Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows | 2% DST; Restrictions on cross border data transfers proposed for data centers and cloud service providers | Coalition of Service Industries (CSI) |
| Nepal | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations; DSTs and Other Taxes | Restrictions on cross border data transfers of health and financial data; registration of cloud providers; broadcast licenses required for OTT services; Restrictions on cross border data transfers of OTT data; DSTs | Computer and Communication Industry Association (CCIA) |
| Nepal | DSTs and Other Taxes; Restrictions on Free Cross-Border Data Flows | 2% DST on non-resident companies; Licensing for data centers and cloud providers; Health and financial institutions to store data locally; Social media regulation. | Information Technology Industry Council (ITIC) |
| New Zealand | Regulation of Electronic Payments; Revenue Sharing | EPS interchange fees capped for all cards; large platforms to pay news publishers | Coalition of Service Industries (CSI) |
| New Zealand | Revenue Sharing | Payments for digital news | Computer and Communication Industry Association (CCIA) |
| New Zealand | DSTs and Other Taxes | DST legislation introduced in 2023, but may not be enacted. | Information Technology Industry Council (ITIC) |
| Nigeria | DSTs and Other Taxes | 1% levy proposed in 2023 but not yet enacted | Digital Media Association (DIMA) |
| Nigeria | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations | Restrictions on cross border data transfers of sovereign data; Draft cloud policy requires adherence to restrictions on cross border data transfers to bid on government contracts. | Global Data Alliance (GDA) |
| Nigeria | Restrictions on Free Cross-Border Data Flows; DSTs and Other Taxes; Domestic Production and Import Substitution | Restrictions on cross border data transfers for multinational corporations; need to hire local workers to manufacture ICT products; 50% local components in ICT products; digital economy taxation | ACT, The App Association |
| Nigeria | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations | Restrictions on cross border data transfers of sovereign data; plans for local provision of cloud and similar services to federal government | Consumer Technology Association (CTA) |
| Nigeria | Restrictions on Free Cross-Border Data Flows; DSTs and Other Taxes | Restrictions on cross border data transfers of sovereign data; new tax regime for foreign companies providing digital services | Coalition of Service Industries (CSI) |
| Nigeria | Restrictions on Free Cross-Border Data Flows; DSTs and Other Taxes; Privacy and Data Protection | Data sovereignty provisions; 1% tax on foreign digital platforms may be expanded, data protection act restricts cross-border data flows | Computer and Communication Industry Association (CCIA) |
| Nigeria | DSTs and Other Taxes; Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations | Data sovereignty provisions; 1% tax on foreign digital platforms may be expanded; data protection act restricts cross-border data flows | Information Technology Industry Council (ITIC) |
| Norway | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations | Plans for a national cloud solution and public sector to use this, may also be extended to regulated sectors like telecom, energy and finance. | Coalition of Service Industries (CSI) |
| Norway | Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows | National cloud solution | Computer and Communication Industry Association (CCIA) |
| Pakistan | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Cloud Service Regulations | Draft data protection law imposes restrictions on cross border data transfers of critical and sensitive data; cloud first policy imposes restrictions on cross border transfers of secret, restricted and sensitive government data; restrictions on export of financial data (except non core data); data transfers prohibited to certain countries like India, Israel etc | Global Data Alliance (GDA) |
| Pakistan | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Cloud Service Regulations | Restrictions on cross border data transfers under data protection law; restrictions on use of foreign cloud services for certain workloads | ACT, The App Association |
| Pakistan | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations; Privacy and Data Protection; | Cloud policy implements restrictions on cross border data transfers of various classes of data; financial sector requires onshoring of core workloads; personal data protection law restricts free cross border data transfers | Consumer Technology Association (CTA) |
| Pakistan | Privacy and Data Protection; Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations; DSTs and Other Taxes; Regulation of Electronic Payments | Restrictions on cross border data transfers under Personal Data Protection Bill; Restrictions on cross border data transfers under cloud policy; DST; State Bank of Pakistan allegedly trying to push use of its domestic payment system to process domestic transactions despite no such regulatory mandate | Coalition of Service Industries (CSI) |
| Pakistan | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations; Privacy and Data Protection; DSTs and Other Taxes | Sectoral limitations on cross-border data transfers; data protection law restricts cross-border data flows; DSTs | Computer and Communication Industry Association (CCIA) |
| Pakistan | DSTs and Other Taxes | Significant economic presence in taxation system; Digital Presence Proceeds tax implemented in 2025 of 5% | Information Technology Industry Council (ITIC) |
| Panama | Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows | Restrictions on cross border data transfers for government entities using cloud services | Coalition of Service Industries (CSI) |
| Panama | Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows | Restrictions on cross border data transfers of government entities' sensitive data | Computer and Communication Industry Association (CCIA) |
| Papua New Guinea | Restrictions on Free Cross-Border Data Flows | Possible restrictions on cross border data transfers under new social media regulations | Computer and Communication Industry Association (CCIA) |
| Peru | Revenue Sharing | Proposed OTT regulation including network usage fee | ACT, The App Association |
| Peru | Restrictions on Free Cross-Border Data Flows | Alleged that preferential treatment given to domestic data storage and service providers; whitelist for data transfers abroad under the Digital Trust Framework | Coalition of Service Industries (CSI) |
| Peru | Restrictions on Free Cross-Border Data Flows | Restrictions on cross border data transfers in digital trust framework, national data center created | Computer and Communication Industry Association (CCIA) |
| Peru | Restrictions on Free Cross-Border Data Flows | Digital Trust Framework creates a whitelist for data exports, creates a national data center | Information Technology Industry Council (ITIC) |
| Philippines | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations | Draft order on government cloud; draft circular imposing restrictions on cross border data transfers of government data | Global Data Alliance (GDA) |
| Philippines | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations | Restrictions on cross border data transfers for certain types of data including restrictions on foreign cloud services for public sector data; Restriction of cross border data transfers for national security and public interest permitted | ACT, The App Association |
| Philippines | DSTs and Other Taxes; Restrictions on Free Cross-Border Data Flows | 12% DST on digital services provided by residents and non-residents, if consumed locally; considering an executive order that would impose restrictions on cross border data transfers for certain data sets | Consumer Technology Association (CTA) |
| Philippines | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations | Draft EO that says only non-sensitive government data can be stored abroad; various other laws and provisions on data sovereignty | Coalition of Service Industries (CSI) |
| Philippines | Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows; DSTs and Other Taxes; Domestic Production and Import Substitution | Public procurement requires foreign cloud services to have a local partner; government agencies to procure solutions through the local Government Cloud; Restrictions on cross border data transfers of government data planned; DSTs; domestic service providers preferred for government contracts | Computer and Communication Industry Association (CCIA) |
| Philippines | Domestic Production and Import Substitution; Restrictions on Free Cross-Border Data Flows; DSTs and Other Taxes | Local ownership requirement in government procurement; countertrade requirements for government contracting; government agencies to procure cloud computing from the government cloud; Pressure for restrictions on cross border data transfers including under Open Access in Data Transmission Act; Tax rules impose onerous compliance requirements | Information Technology Industry Council (ITIC) |
| Poland | DSTs and Other Taxes | Proposal for DST published in 2025 | Coalition of Service Industries (CSI) |
| Poland | DSTs and Other Taxes | Proposal for DST published in 2025 | Computer and Communication Industry Association (CCIA) |
| Portugal | DSTs and Other Taxes | Tax on online streaming services | Coalition of Service Industries (CSI) |
| Rwanda | DSTs and Other Taxes | 2025 law with 1.5% tax on digital services | Computer and Communication Industry Association (CCIA) |
| Saudi Arabia | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Cloud Service Regulations | Cybersecurity controls; cloud computing cybersecurity controls; personal data protection law; restrictions on export of financial sector data | Global Data Alliance (GDA) |
| Saudi Arabia | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations; Privacy and Data Protection | Restrictions on cross border data transfers under cybersecurity framework; Restrictions on cross border data transfers for cloud; personal data protection law restricts cross-border data flows to where there is adequacy decision | Consumer Technology Association (CTA) |
| Saudi Arabia | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations; Privacy and Data Protection; AI Regulations; Anti-Monopoly Laws; Local Testing and Certification | Restrictions on cross border data transfers for a broad swathe of industries; Restrictions on cross border data transfers for cloud services; Data Protection Law (DPL) allegeldy has onerous registration and reporting requirements and restricts cross-border data transfers; Data Sovereignty Public Policy consultation; new AI regulations are generally light touch with some exceptions - draft Global AI hub law is allegedly unclear on standards, etc. which limits cross-border data flows; proposals for digital competition laws; testing and certification requirements | Coalition of Service Industries (CSI) |
| Saudi Arabia | Anti-Monopoly Laws; Cloud Service Regulations; Privacy and Data Protection; AI Regulations | Asymmetric competition / platform regulation; Restrictions on cross border data transfers in various sectors including for cloud and under data protection law; Global AI Hub law brings uncertainty | Computer and Communication Industry Association (CCIA) |
| Singapore | Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows | Restrictions on cross border data transfers under cybersecurity law extends various obligations to cloud service providers and data centers | Computer and Communication Industry Association (CCIA) |
| Slovakia | DSTs and Other Taxes | Proposal to implement tax on online platforms | Coalition of Service Industries (CSI) |
| South Africa | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations | Data sovereignty provisions in national cloud policy | Global Data Alliance (GDA) |
| South Africa | Restrictions on Free Cross-Border Data Flows; Anti-Monopoly Laws; Cloud Service Regulations | Restrictions on cross border data transfers in data and cloud computing policy (data affecting national security and sovereignty); digital platform regulation by the competition commission | ACT, The App Association |
| South Africa | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations | Cloud computing policy contains sovereignty provisions and encourages use of local cloud for government work | Consumer Technology Association (CTA) |
| South Africa | Restrictions on Free Cross-Border Data Flows; Regulation of Electronic Payments; DSTs and Other Taxes; Revenue Sharing | Cloud computing policy has sovereignty provisions with alleged unclear provisions about what data can be exported freely; Restrictions on cross border data transfers by foreign payment systems operators who must settle transactions locally; proposals for local content quotas and licensing fee for platforms to support local content; 15% VAT for online transactions | Coalition of Service Industries (CSI) |
| South Africa | Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows; Revenue Sharing | Proposed revenue sharing for digital news; cloud policy imposes restrictions on cross border data transfers of sovereign data | Computer and Communication Industry Association (CCIA) |
| South Korea | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations; Privacy and Data Protection | Cloud regulations for public sector use purportedly impose restrictive terms including restrictions on cross border data transfers; Personal Information Protection Act (PIPA) is allegedly restrictive; cross-border data flows in financial and insurance sectors are restricted; restrictions on export of geospatial data | Global Data Alliance (GDA) |
| South Korea | Anti-Monopoly Laws | Use of various competition regulations to allegedly discriminate against US companies | ACT, The App Association |
| South Korea | Anti-Monopoly Laws | Online Platform Monopoly Act and other bills imposing ex ante competition regulations; Korean Fair Trade Commission allegedly using antitrust law to impose other obligations on platforms | Consumer Technology Association (CTA) |
| South Korea | Local Testing and Certification; Domestic Production and Import Substitution | Nationalized standards for IT products; restrictions on public procurement of foreign IT products and services | Business Software Alliance (BSA) |
| South Korea | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations; Privacy and Data Protection | Cloud regulations restrict use of foreign service for public sector includes restrictions on cross border data transfers; Personal Information Protection Act (PIPA) is allegedly unclear and too restrictive | Business Software Alliance (BSA) |
| South Korea | Anti-Monopoly Laws; Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Revenue Sharing; AI Regulations | Ex ante digital competition regulation proposed; Restrictions on cross border data transfers for geospatial data, sensitive financial data, processing of personal credit information on overseas cloud, insurance data; rules allegedly limiting US cloud services from public contracts; purported compliance requirements under data protection law; network usage fee; AI law alleged to cast broad compliance obligations; restrictive procurement of foreign AI by government | Coalition of Service Industries (CSI) |
| South Korea | Cloud Service Regulations | Certification for foreign cloud service providers; compliance obligations on cloud providers | Telecommunications Industry Association (TIA) |
| South Korea | Anti-Monopoly Laws; Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows; Revenue Sharing; AI Regulations; Privacy and Data Protection | Ex ante regulation of digital competition; multiple competition bills being considered; restrictions on provision of foreign cloud services; restrictions on cross-border data transfers; foreign cloud service providers allegedly restrained from participating in many government contracts; revenue sharing for value added telecom service providers; network usage fee proposals; AI regulations; data protection law limits cross-border data transfers; restrictions on export of map data; 2021 law to require mobile app marketplaces to use 3rd party payment solutions; Korean Fair Trade Commission enforcing competition law against US companies | Computer and Communication Industry Association (CCIA) |
| South Korea | Revenue Sharing; Restrictions on Free Cross-Border Data Flows; AI Regulations; Cloud Service Regulations | Network usage fee and sender party network pays system; Restrictions on export of geospatial data; Alleged compliance obligations under AI Act; proposed amendments to Ecommerce Act have restrictions on cross border data transfers; Cloud regulations for government workloads | Information Technology Industry Council (ITIC) |
| Spain | DSTs and Other Taxes | 3% indirect tax on digital services since 2021 | Digital Media Association (DIMA) |
| Spain | DSTs and Other Taxes | DST | ACT, The App Association |
| Spain | DSTs and Other Taxes | 3% DST; 64% of covered entities are US companies, only 5.1% are Spanish | Consumer Technology Association (CTA) |
| Spain | DSTs and Other Taxes | Imposed 3% DST since 2021 | Coalition of Service Industries (CSI) |
| Spain | DSTs and Other Taxes | 2020 DST | Computer and Communication Industry Association (CCIA) |
| Sri Lanka | Privacy and Data Protection; Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations; DSTs and Other Taxes | Personal Data Protection Act imposes restrictions on cross-border data transfers; domestic cloud services allegedly given preferential treatment; DSTs | Computer and Communication Industry Association (CCIA) |
| Switzerland | Privacy and Data Protection | Cooperation requirements for platforms with law enforcement that could undermine encryption | Computer and Communication Industry Association (CCIA) |
| Taiwan | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; AI Regulations | Restrictions on cross border data transfers of financial sector data and health data; public sector use of generative AI must involve local processing | Global Data Alliance (GDA) |
| Taiwan | Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows; Revenue Sharing; Local Testing and Certification | Prohibition on use of cloud based AI services for government data processing; local testing requirements; unique set of standard contractual clauses alleged to hinder cross-border data flows; mandatory news media bargaining code | Coalition of Service Industries (CSI) |
| Taiwan | Local Testing and Certification | In country testing requirements | Telecommunications Industry Association (TIA) |
| Taiwan | Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows; Revenue Sharing; Privacy and Data Protection | Financial institutions need permission to use cloud services; de facto restrictions on cross border data transfers for cloud services; various sectoral regulations promoting domestic data processing; news revenue sharing; unique set of standard contractual clauses under data protection law to enable cross-border data transfers | Computer and Communication Industry Association (CCIA) |
| Taiwan | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection | Unique set of standard contractual clauses under data protection law for cross-border data transfers | Information Technology Industry Council (ITIC) |
| Tanzania | DSTs and Other Taxes | DSTs | Computer and Communication Industry Association (CCIA) |
| Tanzania | DSTs and Other Taxes | 2% DST adopted in 2022. | Information Technology Industry Council (ITIC) |
| Thailand | Restrictions on Free Cross-Border Data Flows | IoT regulations | Global Data Alliance (GDA) |
| Thailand | Anti-Monopoly Laws | Proposal for digital platform regulation | ACT, The App Association |
| Thailand | Anti-Monopoly Laws | Proposed digital competition regulation | Consumer Technology Association (CTA) |
| Thailand | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations; Anti-Monopoly Laws; Revenue Sharing | Proposal for local content investment obligations; draft guidelines impose restrictions on cross border data transfers of government workloads on cloud; draft Platform Economy Act will implement asymmetric regulation borrowing from the EU's DMA and DSA; registration requirements for host of digital services under Digital Platform Services decree; proposed digital platform fair competition rules; proposals to extend telecom regulation to OTT services may require contributions to network development | Coalition of Service Industries (CSI) |
| Thailand | Anti-Monopoly Laws; Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection | Asymmetric platform regulation for digital services; Restrictions on cross border data transfers and restrictions on cloud services; the Personal Data Protection Act restricts free export of data; ecommerce regulations | Computer and Communication Industry Association (CCIA) |
| Thailand | Regulation of Electronic Payments; Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations | Domestic processing of domestic debit card transactions; Compliance obligations for ecommerce companies, and other platforms; Restrictions on cross border data transfers under Go First Cloud Policy; Prohibition on export of government data | Information Technology Industry Council (ITIC) |
| Turkiye | DSTs and Other Taxes | DST introduced in 2020 | Digital Media Association (DIMA) |
| Turkiye | Regulation of Electronic Payments; Privacy and Data Protection; Cloud Service Regulations | Restrictions on cross border data transfers of critical data and public sector data on cloud under Presidential Circular and Information and Communication Security Guide; Restrictions on cross border data transfers of banking and other financial data; personal data protection law is similar to GDPR but stricter; Restrictions on cross border data transfers of certain telecoms data - traffic and location data; Domestic communications to be routed only within Turkiye; Large social media platforms to appoint local rep and store data locally | Global Data Alliance (GDA) |
| Turkiye | DSTs and Other Taxes; Anti-Monopoly Laws; Restrictions on Free Cross-Border Data Flows | Restrictions on cross border data transfers of payments data; competition law amended to impose ex ante framework on platforms; DSTs | ACT, The App Association |
| Turkiye | DSTs and Other Taxes | 7.5% DST and a withholding tax for digital ad payments | Consumer Technology Association (CTA) |
| Turkiye | DSTs and Other Taxes; Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations; Regulation of Electronic Payments; Anti-Monopoly Laws; Revenue Sharing | DST of 7.5% since 2020; Restrictions on cross border data transfers for government workloads and financial sector; restrictions on use of cloud services including in financial and crypto sector; regulation of inbound cross-border payments; proposals for ex ante digital competition regulation; proposals to regulate OTT services under telecom regulations may see network usage fees applied | Coalition of Service Industries (CSI) |
| Turkiye | Anti-Monopoly Laws; Cloud Service Regulations; Restrictions on Free Cross-Border Data Flows; Revenue Sharing; Privacy and Data Protection; DSTs and Other Taxes | Asymmetric platform regulation for competition; Restrictions on cross border data transfers for government and sensitive personal data; financial services to mirror data; restrictions on export of electronic payment services data; telecom regulations being applied to OTT services including network usage fee; The Law on the Protection of Personal Data (Law No. 6698) restricts free cross-border data transfers, no adequacy decisions yet; DST of 7.5%; regulations on ecommerce | Computer and Communication Industry Association (CCIA) |
| Turkiye | Privacy and Data Protection; Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations; DSTs and Other Taxes; Revenue Sharing | Data protection law requires adequacy for export of personal data, no adequacy decisions yet; Restrictions on cross border data transfers of strategic government data and financial sector data; DST of 7.5% since 2020; Proposal for telecom regulations to be applied to OTT services includes possible contributions to universal service fund | Information Technology Industry Council (ITIC) |
| UAE | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Cloud Service Regulations | Personal data protection law imposes restrictions on cross border data transfers; Restrictions on cross border data transfers of health data; cloud security policy for certain public sector workloads; Restrictions on cross border data transfers of certain financial data | Global Data Alliance (GDA) |
| UAE | Restrictions on Free Cross-Border Data Flows | Restrictions on cross border data transfers for public sector data and regulated industries | ACT, The App Association |
| UAE | Domestic Production and Import Substitution; Regulation of Electronic Payments; Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations | Sovereignty motivations behind push for domestic electronic payments solutions; Restrictions on cross border data transfers by cloud services serving government and regulated entities; restrictions on export of health data; IoT regulations preference domestic operators | Coalition of Service Industries (CSI) |
| UAE | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations; | Restrictions on cross border data transfers of government data and financial data; preference for local cloud services for government workloads | Computer and Communication Industry Association (CCIA) |
| Uganda | Restrictions on Free Cross-Border Data Flows; DSTs and Other Taxes | Financial institutions to store data locally; DST | Computer and Communication Industry Association (CCIA) |
| Uganda | DSTs and Other Taxes | DST of 5% since July 2023 | Information Technology Industry Council (ITIC) |
| UK | DSTs and Other Taxes | 2% DST | Digital Media Association (DIMA) |
| UK | Anti-Monopoly Laws; Privacy and Data Protection; DSTs and Other Taxes | Digital competition regulation; prohibition on use of strong encryption; DST | ACT, The App Association |
| UK | DSTs and Other Taxes; Anti-Monopoly Laws | 2% DST from 2020; Digital Markets, Competition and Consumers Act is an ex ante competition framework | Consumer Technology Association (CTA) |
| UK | DSTs and Other Taxes; Anti-Monopoly Laws | 2% DST, with proposals to hike this rate; new digital competition framework implemented in January 2025 | Coalition of Service Industries (CSI) |
| UK | Privacy and Data Protection; Anti-Monopoly Laws; DSTs and Other Taxes | Digital competition regulation; DST of 2% since 2020 | Computer and Communication Industry Association (CCIA) |
| UK | DSTs and Other Taxes | Adopted DST in 2020. | Information Technology Industry Council (ITIC) |
| Uzbekistan | Anti-Monopoly Laws; Privacy and Data Protection; Restrictions on Free Cross-Border Data Flows | Asymmetric competition/platform regulation similar to DMA; Law on Personal Data establishes restrictions on cross border data transfers | Computer and Communication Industry Association (CCIA) |
| Vietnam | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection | Restrictions on cross border data transfers under the Cybersecurity Law; Restrictions on cross border data transfers of social media personal data; personal data protection law; data law; Restrictions on cross border data transfers of health data | Global Data Alliance (GDA) |
| Vietnam | Anti-Monopoly Laws; AI Regulations; Restrictions on Free Cross-Border Data Flows | Digital competition law like DMA enacted; AI regulation; restrictions on social media under the Cybersecurity Law which also imposes restrictions on cross border data transfers for critical systems and licensing requirements | ACT, The App Association |
| Vietnam | Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations; Privacy and Data Protection; AI Regulations | Broad restrictions on cross border data transfers in Cybersecurity Law; draft Data law restricts cross-border flows of certain data sets; draft personal data protection law restricts free cross-border data flows; proposal for digital transformation law which would include obligations on transparency of algorithms, data privacy, ex ante competition obligations etc | Consumer Technology Association (CTA) |
| Vietnam | Restrictions on Free Cross-Border Data Flows ; Privacy and Data Protection; AI Regulations | 2025 Personal Data Protection Law, 2024 draft Data Law, Cybersecurity Law, the draft Law on Artificial Intelligence, and numerous implementing regulations and decrees, including Decree 53/2022 and Decree 72, impose restrictions on cross border data transfers | Business Software Alliance (BSA) |
| Vietnam | AI Regulations; Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection | Proposed new cybersecurity law has provisions restricting free cross border data flows, government access to data and AI; Decree 53 under current cybersecurity law imposes restrictions on cross border data flows; data protection law imposes restrictions on cross border data flows as does decree 147 | Business Software Alliance (BSA) |
| Vietnam | Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; Domestic Production and Import Substitution; Anti-Monopoly Laws; AI Regulations; Regulation of Electronic Payments; DSTs and Other Taxes | Data law restricts cross-border data transfers; alleged onerous obligations under data protection law including related to cross-border data transfers; Restrictions on cross border data transfers in cybersecurity law; preference for local cloud services; considering digital regulation law that will impose ex ante obligations similar to those under the EU's DMA and DSA; draft AI law alleged to impose high compliance costs; local resolution of electronic payment systems; Tax administration law taxes cross-border ecommerce and other digital services; prohibition on import of refurbished products | Coalition of Service Industries (CSI) |
| Vietnam | Domestic Production and Import Substitution | Import export license required for products with encryption; prohibition on import of refurbished products | Telecommunications Industry Association (TIA) |
| Vietnam | Anti-Monopoly Laws; Domestic Production and Import Substitution; Restrictions on Free Cross-Border Data Flows; Cloud Service Regulations; Privacy and Data Protection; AI Regulations; DSTs and Other Taxes | Proposed digital transformation law to impose asymmetric competition obligations; import barriers for ICT goods using encryption; Restrictions on cross border data transfers under cybersecurity law and decrees issued under this; preference for local cloud services in public sector contracting; Restrictions on cross border data transfers under personal data protection law and data law; draft DTI law regulates AI and allegedly includes problematic compliance norms, draft AI law allegedly imposes high compliance burdens, draft personal data protection law also regulates AI and allegedly imposes high compliance burdens; tax administration law taxes cross border ecommerce and other digital services | Computer and Communication Industry Association (CCIA) |
| Vietnam | Domestic Production and Import Substitution; Local Testing and Certification; Regulation of Electronic Payments; Restrictions on Free Cross-Border Data Flows; Privacy and Data Protection; AI Regulations; DSTs and Other Taxes | Import of products with cryptography or cybersecurity functions requires license; prohibitions on import of refurbished ICT products; domestic credit transactions to be routed through local payments institution; Cybersecurity law imposes restrictions on cross border data transfers; Compliance obligations under data protection law including restrictions on data flows; Alleged overly prescriptive rules under proposed Digital Technology Industry law, which will regulate emerging tech including AI; Alleged that draft AI law has extensive documentation and other requirements; Tax administration law taxes cross-border ecommerce and other digital services. | Information Technology Industry Council (ITIC) |
| Zimbabwe | DSTs and Other Taxes | Taxation of ecommerce platforms under Finance Act, 2019 | Information Technology Industry Council (ITIC) |