{"id":344,"date":"2016-01-20T23:07:29","date_gmt":"2016-01-21T03:07:29","guid":{"rendered":"http:\/\/blogs.duanemorris.com\/techlaw\/?p=344"},"modified":"2016-06-20T12:54:01","modified_gmt":"2016-06-20T16:54:01","slug":"russias-data-localization-law-a-violation-of-wto-regulations","status":"publish","type":"post","link":"https:\/\/blogs.duanemorris.com\/techlaw\/2016\/01\/20\/russias-data-localization-law-a-violation-of-wto-regulations\/","title":{"rendered":"Russia’s data localization law – a violation of WTO regulations?"},"content":{"rendered":"

Just over a year ago, on December 31, 2014, Russian President Vladimir Putin signed into law new personal data localization requirements, mandating that data operators collecting personal data about Russian citizens “<\/a>record, systematize, accumulate, store, amend, update and retrieve” data using databases physically located in Russia.\u00a0 Among other things, passage of the new law generated immediate concerns regarding its scope, implementation, and implications.\u00a0 On August 3, 2015, less than a month before the new law was to take effect, the Russian Ministry of Communications and Mass Media published official “guidelines”, largely in the form of FAQs, in an attempt to “clarify” the law and address some of the questions and concerns it generated.<\/a> http:\/\/www.minsvyaz.ru\/ru\/personaldata\/<\/span><\/u><\/span><\/a> (in Russian).\u00a0 Nevertheless, one question that has remained unanswered since the law has gone into effect (September 1, 2015) is whether the law introduces trade restrictions that violate World Trade Organization regulations.\u00a0 Russia has been a WTO member since August 2012<\/a>.<\/span><\/p>\n

The short answer is that WTO regulations do not explicitly<\/i> prohibit data localization laws.\u00a0 That said, there is an emerging body of scholarship \u2013 undertaken by various “think tanks”, governmental agencies, academics, and other interested parties \u2013 encouraging the WTO to expand its sphere of influence on the restrictions to trade that may result from data localization laws.\u00a0 For example, a November 2015 Congressional Research Service report <\/a>stated that<\/p>\n

[t]he 161 members of the WTO negotiated and have maintained a basic set of multilateral rules in the form of the \u2018GATS\u2019 (implemented in 1995).\u3000 However, the GATS is largely viewed as limited in scope, pre-dating significant technological developments over the past two decades, and in need of expansion if it is to be an effective instrument of trade liberalization.\u00a0 At present, it seems as if the efforts of the WTO members to expand on these rules have stalled, with little prospect of success at least in the foreseeable future.<\/p>\n

In a July 2015 article on behalf of the Council on Foreign Relations, <\/a>David Fidler pointed out “[i]n a 1998 declaration, WTO members agreed not to impose customs duties on electronic transactions and recognized the need to address e-commerce directly.\u00a0 However, the WTO\u2019s e-commerce work program has not progressed much because WTO members disagree on various issues.” See also<\/i> https:\/\/www.wto.org\/english\/tratop_e\/ecom_e\/mindec1_e.htm<\/span><\/u><\/span><\/a>.<\/span><\/p>\n

Daniel Castro and Alan McQuinn, in an article entitled Cross-Border Data Flows Enable Growth in All Industries<\/i><\/a>, have argued that barriers to cross-data flows may measurably harm international trade; yet the damage is difficult to measure because the WTO does not track statistics that would enable specific calculations.\u00a0 See also<\/em> the Congressional Research Service Report.<\/a>\u00a0 Both of the aforementioned publications cite data localization laws as barriers to cross-data flow and, consequently, to international trade.<\/p>\n

Castro and McQuinn suggest several action options, one being an expansion to the WTO definitions of localization barriers to trade \u2013 a difficult task because all signatory nations would have to approve the change.\u00a0 Another approach may be to put into place a new agreement that would require signatories to hold each other more accountable for positive data-flow practices and considering and restricting trade-distorting practices, which would include data localization laws.\u00a0 To that point, WTO regulation enforcement occurs through signatory nations bringing complaints against other signatory nations<\/a>.\u00a0 To date, however, there have been no complaints raised against data localization laws by any WTO member against any other WTO member; and there are no robust regulations<\/a> under which such (presently-hypothetical) complaints might survive at this time.<\/p>\n

As recently as October 2015, the Information Technology Industry Council (“ITI”) has advocated<\/a> during G20, B20, and International Chamber of Commerce meetings that “the WTO can remain and become more relevant to the business community if it can begin meaningful work on promoting digital trade and address[] forced localization measures, including data localization requirements.”\u00a0 It appears that the Trans-Pacific Partnership (“TPP”), agreed-to in early October 2015 \u2013 perhaps a model for ITI\u2019s recommendations for the WTO \u2013 will directly address data localization laws.\u00a0 That said, Russia is not a signatory to the TPP.<\/p>\n

In summary, Russia\u2019s data localization law does not directly violate WTO regulations, as they are currently written, though the recent calls to action may inspire \u2013 or perhaps require \u2013 the WTO to mobilize and strengthen its stance on this topic in the not-so-distant future.
\n<\/b><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Just over a year ago, on December 31, 2014, Russian President Vladimir Putin signed into law new personal data localization requirements, mandating that data operators collecting personal data about Russian citizens “record, systematize, accumulate, store, amend, update and retrieve” data using databases physically located in Russia.\u00a0 Among other things, passage of the new law generated … <\/p>\n

Continue reading “Russia’s data localization law – a violation of WTO regulations?”<\/span><\/a><\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[588,589,374],"ppma_author":[878],"class_list":["post-344","post","type-post","status-publish","format-standard","hentry","category-infotechtelecom","tag-data-localization","tag-russia","tag-wto"],"authors":[{"term_id":878,"user_id":6,"is_guest":0,"slug":"duanemorris3","display_name":"Duane Morris","avatar_url":"https:\/\/secure.gravatar.com\/avatar\/843ff6e7a8fe5fc92109b47a45f34b6cf0ea499e6e788db23456c838b0ae6747?s=96&d=blank&r=g","0":null,"1":"","2":"","3":"","4":"","5":"","6":"","7":"","8":""}],"_links":{"self":[{"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/posts\/344","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/comments?post=344"}],"version-history":[{"count":0,"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/posts\/344\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/media?parent=344"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/categories?post=344"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/tags?post=344"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/techlaw\/wp-json\/wp\/v2\/ppma_author?post=344"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}