<?xml version="1.0" encoding="UTF-8"?>
<PerformancePlanOrReport xmlns="urn:ISO:std:iso:17469:tech:xsd:PerformancePlanOrReport" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

 xsi:schemaLocation="urn:ISO:std:iso:17469:tech:xsd:PerformancePlanOrReport http://stratml.us/references/PerformancePlanOrReport20160216.xsd" Type="Strategic_Plan"><Name>How Barriers to Cross-Border Data Flows Are Spreading Globally, What They Cost, and How to Address Them</Name><Description>Data-localization policies are spreading rapidly around the world. This measurably reduces trade, slows productivity, and increases prices for affected industries. Like-minded nations must work together to stem the tide and build an open, rules-based, and innovative digital economy.
</Description><OtherInformation/><StrategicPlanCore><Organization><Name>Information Technology and Innovation Foundation</Name><Acronym>ITIF</Acronym><Identifier>_d4d5fca8-64ec-11df-9d4b-945c7a64ea2a</Identifier><Description>The Information Technology and Innovation Foundation (ITIF) is a nonprofit, nonpartisan research and educational institute focusing on the intersection of technological innovation and public policy. Recognized as the world’s leading science and technology think tank, ITIF’s mission is to formulate and promote policy solutions that accelerate innovation and boost productivity to spur growth, opportunity, and progress.

For more information, visit us at www.itif.org.</Description><Stakeholder StakeholderTypeType="Person"><Name>Nigel Cory</Name><Description>Co-Author ~ Nigel Cory (@NigelCory) is an associate director covering trade policy at ITIF. He focuses on cross-border data flows, data governance, and intellectual property, and how they each relate to digital trade and the broader digital economy.</Description></Stakeholder><Stakeholder StakeholderTypeType="Person"><Name>Luke Dascoli</Name><Description>Co-Author ~ Luke Dascoli is the economic and technology policy research assistant at ITIF. He was previously a research assistant in the MDI Scholars Program at the McCourt School of Public Policy's Massive Data Institute. He holds a B.A. in Political Economy from Georgetown University.</Description></Stakeholder><Stakeholder StakeholderTypeType="Organization"><Name>IT Industry Council</Name><Description>This report was made possible in part by generous support from the IT Industry Council.</Description></Stakeholder><Stakeholder StakeholderTypeType="Person"><Name>Javier Lopez Gonzalez</Name><Description>The authors thank Javier Lopez Gonzalez (senior trade policy analyst, OECD) and Erik van der Marel (senior economist, ECIPE) for their advice, encouragement, and good humor.</Description></Stakeholder><Stakeholder StakeholderTypeType="Person"><Name>Erik van der Marel</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Person"><Name>Rob Atkinson</Name><Description>The authors also wish to thank Rob Atkinson, Stephen Ezell, Daniel Castro, and Malachy McLaughlin and the many government officials, private sector representatives, trade associations, academics, and others who helped build the list of data localization measures and to understand the changing nature and impact of data localization around the world. Any errors or omissions are the authors’ responsibility alone.</Description></Stakeholder><Stakeholder StakeholderTypeType="Person"><Name>Stephen Ezell</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Person"><Name>Daniel Castro</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Person"><Name>Malachy McLaughlin</Name><Description/></Stakeholder></Organization><Vision><Description>An open, rules-based, and innovative digital economy</Description><Identifier>_ed9d8516-e9a2-11eb-bef0-f1422c83ea00</Identifier></Vision><Mission><Description>To stem the spread of data-localization policies around the world</Description><Identifier>_ed9d86c4-e9a2-11eb-bef0-f1422c83ea00</Identifier></Mission><Value><Name>Data</Name><Description/></Value><Value><Name>Openness</Name><Description/></Value><Value><Name>Trust</Name><Description/></Value><Value><Name>Innovation</Name><Description>Data-driven innovation and digital trade are only going to become more central to the global economy.</Description></Value><Value><Name>Rules</Name><Description>Governments need to update laws to address legitimate data-related concerns that arise, but this should be done in a considered way so that people, firms, and governments can maximize the enormous societal and economic benefits of data and digital technologies. Restricting the movement of data does nothing to help improve societal or economic outcomes.</Description></Value><Value><Name>Reciprocity</Name><Description>The recommendations show how like-minded countries can develop shared governance arrangements that can work across legal systems, create reciprocity and nondiscrimination, and build-in independent redress and oversight, all the while allowing data flows.</Description></Value><Value><Name>Nondiscrimination</Name><Description/></Value><Value><Name>Cooperation</Name><Description>Meanwhile, digital protectionists and scofflaws such as China and Russia refuse to support digital free trade or join global efforts to improve law enforcement cooperation on cybercrime.</Description></Value><Value><Name>Resources</Name><Description>What is particularly crucial is that countries that support shared digital governance need to dedicate far more resources to help the many “swing states” that have not enacted localization and have not yet decided to follow the EU or China’s model of restrictions and control.</Description></Value><Value><Name>Integration</Name><Description>The success or failure of this engagement and these new agreements and legal mechanisms will go a long way toward shaping the Internet of the future and whether it remains open, integrated, and innovative or closed, fragmented, and based on state control.</Description></Value><Value><Name>Productivity</Name><Description/></Value><Goal><Name>Data Governance</Name><Description>Work together to build an open, rules-based, and innovative global digital economy</Description><Identifier>_ed9d87aa-e9a2-11eb-bef0-f1422c83ea00</Identifier><SequenceIndicator>1</SequenceIndicator><Stakeholder StakeholderTypeType="Person"><Name>Former Japanese Prime Minister Abe</Name><Description>Former Japanese prime minister Abe deserves a lot of credit for putting data governance and localization on the global agenda with his concept for “data free flow with trust,” which is a vision wherein openness and trust exist in symbiosis, not as contradictions.  However, it is still conceptual and has not been defined.</Description></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Cooperating Countries</Name><Description>Countries that support this goal will need to work together to develop new norms, rules, cooperation mechanisms, and agreements to address legitimate concerns raised by cross-border data flows while supporting the free flow of data. These initiatives can then form the foundation for broader debate, adaptation, and adoption to expand to more issues and countries. It will be challenging to develop a common agenda, even among core countries such as Australia, Canada, Chile, Japan, New Zealand, Singapore, the United Kingdom, and the United States.</Description></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Australia</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Canada</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Chile</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Japan</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>New Zealand</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Singapore</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>United Kingdom</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>United States</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Digital Protectionists</Name><Description>It will be difficult, if not impossible, to make meaningful progress in any forum that involves China, Russia, and others that support digital protectionism and control.</Description></Stakeholder><Stakeholder StakeholderTypeType="Organization"><Name>China</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Organization"><Name>Russia</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Organization"><Name>Europe</Name><Description>It’s hard to include Europe given its inability to genuinely engage and collaborate with counterparts unless its privacy preferences prevail over everyone else’s.</Description></Stakeholder><OtherInformation>Building an open, rules-based, and innovative global digital economy will depend on a small group of proactive and ambitious countries working together. This path ahead reflects the fact that there is no global forum for cooperation and progress on data issues—and nor should there be at this stage.</OtherInformation><Objective><Name>Personal Data</Name><Description>Provide multiple mechanisms to transfer personal data</Description><Identifier>_ed9da780-e9a2-11eb-bef0-f1422c83ea00</Identifier><SequenceIndicator>1.1</SequenceIndicator><Stakeholder StakeholderTypeType="Generic_Group"><Name>Governments</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Countries</Name><Description/></Stakeholder><OtherInformation>Governments should provide multiple mechanisms for the cross-border transfer of personal data. These mechanisms should be accessible to firms of all sizes. Countries should explicitly mention acceptable frameworks and standards for transfers.</OtherInformation></Objective><Objective><Name>Consumer Trust</Name><Description>Encourage firms to improve consumer trust through greater transparency about how they manage data</Description><Identifier>_ed9da88e-e9a2-11eb-bef0-f1422c83ea00</Identifier><SequenceIndicator>1.2</SequenceIndicator><Stakeholder StakeholderTypeType="Generic_Group"><Name>Firms</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Consumers</Name><Description/></Stakeholder><OtherInformation>Governments should encourage businesses to improve transparency on how they manage data, including on a global basis, such as by regularly disclosing information about government requests for data.</OtherInformation></Objective><Objective><Name>Data Standards</Name><Description>Support the development of global data-related standards</Description><Identifier>_ed9da974-e9a2-11eb-bef0-f1422c83ea00</Identifier><SequenceIndicator>1.3</SequenceIndicator><Stakeholder StakeholderTypeType="Generic_Group"><Name>Governments</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Multi-Stakeholder Forums</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Intergovernmental Forums</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Organization"><Name>OECD</Name><Description/></Stakeholder><OtherInformation>Governments should support global, market-led, voluntary, and consensus-based efforts to develop and use data and digital technology standards, such as via multi-stakeholder forums and intergovernmental forums (e.g., OECD).</OtherInformation></Objective><Objective><Name>Government Data &amp; Services</Name><Description>Protect cloud-based government data and services</Description><Identifier>_ed9daa64-e9a2-11eb-bef0-f1422c83ea00</Identifier><SequenceIndicator>1.4</SequenceIndicator><Stakeholder StakeholderTypeType="Generic_Group"><Name>Governments</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Cloud Providers</Name><Description/></Stakeholder><OtherInformation>Governments should protect cloud-based government data and services by ensuring that cloud providers are audited and certified against national and international standards, sector-specific regulations (such as health care and financial), national certifications (e.g., U.S. FedRAMP, Germany C5, Australia IRAP), and global accreditations (e.g., ISO 27001 and ISO 27018).</OtherInformation></Objective><Objective><Name>Developing Countries</Name><Description>Provide more assistance to developing countries to help with digital economy policy</Description><Identifier>_ed9dab4a-e9a2-11eb-bef0-f1422c83ea00</Identifier><SequenceIndicator>1.5</SequenceIndicator><Stakeholder StakeholderTypeType="Generic_Group"><Name>Developing Countries</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Developed Economies</Name><Description/></Stakeholder><OtherInformation>Developed economies should provide technical assistance and capacity-building assistance to developing economies to help them build their data governance framework.</OtherInformation></Objective></Goal><Goal><Name>Digital Trade</Name><Description>Support digital free trade</Description><Identifier>_ed9dac30-e9a2-11eb-bef0-f1422c83ea00</Identifier><SequenceIndicator>2</SequenceIndicator><Stakeholder><Name/><Description/></Stakeholder><OtherInformation>Digital free trade: Policymakers should support rules that protect data flows, prohibit data localization, and only allow narrow exceptions to these provisions at e-commerce negotiations at the World Trade Organization (WTO). Policymakers should also create new tools to enact retaliatory measures against countries that enact data localization and other digital protectionist rules. Policymakers should encourage national and global bodies to conduct surveys about the firm-level impact of data localization. Trade negotiators should develop transparency and good regulatory practices provisions to ensure opaque regulatory rulemaking can’t be used to enact barriers to data flows and digital trade.</OtherInformation><Objective><Name>Rules</Name><Description>Support rules that protect data flows, prohibit data localization, and only allow narrow exceptions to these provisions at e-commerce negotiations at the World Trade Organization (WTO).</Description><Identifier>_ed9dad2a-e9a2-11eb-bef0-f1422c83ea00</Identifier><SequenceIndicator>2.1</SequenceIndicator><Stakeholder StakeholderTypeType="Organization"><Name>World Trade Organization</Name><Description/></Stakeholder><OtherInformation>Support an ambitious outcome on data flows at the e-commerce negotiations at the WTO, including an explicit prohibition on data localization and narrow and detailed exceptions. The United States and others should exclude China and Russia and others that do not support ambitious outcomes. A weak result may be worse than no deal at all.</OtherInformation></Objective><Objective><Name>Retaliatory Tools</Name><Description>Create new tools to enact retaliatory measures against countries that enact data localization and other digital protectionist rules</Description><Identifier>_ed9dae1a-e9a2-11eb-bef0-f1422c83ea00</Identifier><SequenceIndicator>2.2</SequenceIndicator><Stakeholder StakeholderTypeType="Generic_Group"><Name>Digital Free-Trade Countries</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Digital Protectionist Countries</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Firms</Name><Description/></Stakeholder><OtherInformation>To create reciprocity, policymakers from digital free-trade countries should develop new countermeasures against countries that enact data localization and other digital protectionist measures. Firms from digital protectionist countries shouldn’t benefit from open digital markets.</OtherInformation></Objective><Objective><Name>Surveys</Name><Description>Encourage national and global bodies to conduct surveys about the firm-level impact of data localization.</Description><Identifier>_ed9daf0a-e9a2-11eb-bef0-f1422c83ea00</Identifier><SequenceIndicator>2.3</SequenceIndicator><Stakeholder StakeholderTypeType="Generic_Group"><Name>Policymakers</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>National Bodies</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Global Bodies</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Firms</Name><Description/></Stakeholder><OtherInformation>Policymakers should encourage national, regional, and global organizations to conduct detailed surveys about the impact of data localization and other barriers to cross-border data transfers.</OtherInformation></Objective><Objective><Name>Transparency &amp; Regulatory Practices</Name><Description>Develop transparency and good regulatory practices provisions to ensure opaque regulatory rulemaking can’t be used to enact barriers to data flows and digital trade.</Description><Identifier>_ed9db00e-e9a2-11eb-bef0-f1422c83ea00</Identifier><SequenceIndicator>2.4</SequenceIndicator><Stakeholder StakeholderTypeType="Generic_Group"><Name>Trade Negotiators</Name><Description/></Stakeholder><OtherInformation>Digital free-trade countries should advocate for transparency and good regulatory practices as part of trade agreements, such as allowing parties to request the publication of impact assessments to ensure that digital regulations are appropriate, proportionate, and effective.</OtherInformation></Objective></Goal></StrategicPlanCore><AdministrativeInformation><StartDate>2021-07-19</StartDate><EndDate/><PublicationDate>2021-07-20</PublicationDate><Source>https://itif.org/publications/2021/07/19/how-barriers-cross-border-data-flows-are-spreading-globally-what-they-cost?mc_cid=031638e072&amp;mc_eid=131f75a87f</Source><Submitter><GivenName>Owen</GivenName><Surname>Ambur</Surname><PhoneNumber/><EmailAddress>Owen.Ambur@verizon.net</EmailAddress></Submitter></AdministrativeInformation></PerformancePlanOrReport>