Digital Trade and U.S. Trade Policy
Digital Trade and U.S. Trade Policy
Trade Policy
R44565
Digital Trade and U.S. Trade Policy
December 9, 2021
As the global internet expands and evolves, digital trade has become prominent on the global
trade and economic policy agenda. According to the Department of Commerce, the “digital Rachel F. Fefer,
economy” accounted for 9.6% of U.S. gross domestic product (GDP) in 2019 and supported 7.7 Coordinator
million U.S. jobs, or 5.0% of total U.S. employment in 2019. From 2005 to 2019, real value Analyst in International
added for the U.S. digital economy grew at an average annual rate of 5.2% per year, outpacing Trade and Finance
the 2.2% growth in the overall economy each year. Digital trade has been growing faster than
traditional trade in goods and services, with the pandemic further spurring its expansion.
Shayerah I. Akhtar
Specialist in International
Congress plays an important role in shaping U.S. policy on digital trade, from oversight of Trade and Finance
federal agencies charged with regulating cross-border data flows to shaping and considering
legislation to implement new trade rules and disciplines through trade negotiations. Congress also
works with the executive branch to identify the appropriate balance between digital trasde and Michael D. Sutherland
other policy objectives, including privacy and national security. Analyst in International
Trade and Finance
Digital trade includes end-products, such as downloaded movies, and products and services that
rely on or facilitate digital trade, such as streaming services and productivity-enhancing tools like
cloud data storage and email. In 2020, U.S. exports of information and communications
technologies (ICT) services increased to $84 billion, while services exports that could be ICT-
enabled totaled $520 billion. Digital trade is growing on a global basis, contributing more to GDP than financial or
merchandise flows.
The increase in digital trade raises new challenges in U.S. trade policy, including how to best address new and emerging
trade barriers. As with traditional trade barriers, digital trade constraints can be classified as tariff or nontariff barriers. In
addition to high tariffs, barriers to digital trade may include localization requirements, cross border data flow limitations,
intellectual property rights (IPR) infringement, forced technology transfer, web filtering, economic espionage, and
cybercrime exposure or state-directed theft of trade secrets. China’s policies, such as those on internet sovereignty and
cybersecurity, particularly pose challenges for U.S. companies.
Digital trade issues often overlap and cut across policy areas, such as intellectual property rights (IPR) and national security,
raising complex questions for Congress on how to weigh different policy objectives. The Organisation for Economic Co-
operation and Development (OECD) points out three potentially conflicting policy goals in the internet economy: (1)
enabling the internet; (2) boosting or preserving competition within and outside the internet; and (3) protecting privacy and
consumers, more generally.
While no multilateral agreement on digital trade exists in the World Trade Organization (WTO), certain WTO agreements
cover some aspects of digital trade. Recent bilateral and plurilateral agreements have begun to address digital trade rules and
barriers more explicitly. For example, the U.S.-Mexico-Canada Agreement (USMCA) and ongoing plurilateral discussions in
the WTO on an e-commerce agreement could address digital trade barriers to varying degrees. Other international fora also
are discussing digital trade, providing the United States with multiple opportunities to engage in and shape global norms.
With workers and firms in the high-tech sector in every U.S. state and congressional district, and with over two-thirds of U.S.
jobs requiring digital skills, Congress has an interest in ensuring and developing the global rules and norms of the internet
economy in line with U.S. laws and norms, and in establishing a U.S. trade policy on digital trade that advances U.S. national
interests
Contents
Introduction ..................................................................................................................................... 1
Role of Digital Trade in the Economy ............................................................................................. 2
Economic Impact of Digital Trade ............................................................................................ 5
COVID-19 and Digital Trade............................................................................................ 10
Digitization Challenges ......................................................................................................11
Digital Trade Policy and Barriers .................................................................................................. 12
Tariff and Tax Barriers ............................................................................................................ 14
Nontariff Barriers .................................................................................................................... 16
Localization Requirements ............................................................................................... 16
Intellectual Property Rights (IPR) Infringement ............................................................... 18
National Standards and Burdensome Conformity Assessment ......................................... 20
Filtering, Blocking, and Net Neutrality ............................................................................ 21
Cybersecurity Risks .......................................................................................................... 22
U.S. Digital Trade with Key Trading Partners .............................................................................. 24
European Union ...................................................................................................................... 24
General Data Protection Regulation (GDPR) ................................................................... 25
The EU’s Digital Policy .................................................................................................... 26
New EU Copyright Rules ................................................................................................. 28
U.S.-EU Digital Cooperation ............................................................................................ 29
China ....................................................................................................................................... 30
“Cyber Sovereignty” and China’s Involvement in Global Internet Governance .............. 32
China’s Emerging Cyberspace and Data Protection Regime ............................................ 33
U.S. Efforts to Address Digital Trade Barriers and IP Theft Issues in China ................... 38
Digital Trade Provisions in Trade Agreements .............................................................................. 39
WTO Provisions ...................................................................................................................... 40
General Agreement on Trade in Services (GATS) ............................................................ 40
Declaration on Global Electronic Commerce ................................................................... 40
Information Technology Agreement (ITA) ....................................................................... 41
Agreement on Trade-Related Aspects of Intellectual Property Rights (TRIPS) ............... 41
World Intellectual Property Organization (WIPO) Internet Treaties ................................ 42
Current WTO Plurilateral Negotiations ............................................................................ 43
U.S. Bilateral and Plurilateral Agreements ............................................................................. 44
United States-Mexico-Canada Agreement (USMCA) ...................................................... 45
U.S.-Japan Digital Trade Agreement ................................................................................ 46
Other International Forums for Digital Trade ......................................................................... 47
Issues for Congress ........................................................................................................................ 48
Figures
Figure 1. Digital Economy Value Added by Component ................................................................ 3
Figure 2. U.S. Trade in ICT and Potentially ICT-Enabled Services, by Type of Service ................ 5
Figure 3. Cloud Computing Infrastructure Global Market Share .................................................... 9
Figure 4. Trans-Atlantic Digitally Enabled Services Trade Flows ................................................ 25
Tables
Table 1. American Chamber of Commerce in China 2021 Business Survey ................................ 31
Contacts
Author Information........................................................................................................................ 50
Introduction
The rapid growth of digital technologies in recent years has created new opportunities for U.S.
consumers and businesses but also new challenges in international trade. For example, consumers
today access e-commerce, social media, telemedicine, and other offerings not imagined thirty
years ago. Businesses use advanced technology to reach new markets, track global supply chains,
analyze big data, and create new products and services. New technologies facilitate economic
activity but also create new trade policy questions and concerns. Data and data flows form a pillar
of innovation and economic growth.
The “digital economy” accounted for 9.6% of U.S. gross domestic product (GDP) in 2019,
including (1) the information and communications technologies (ICT) sector and underlying
infrastructure, (2) business-to-business and business-to-consumer e‐commerce, and (3) priced
digital services (e.g., internet cloud or intermediary services).1 The digital economy supported 7.7
U.S. million jobs, or 5.0% of total U.S. employment in 2019.2 One study found that the “tech-
ecommerce ecosystem” added 1.4 million U.S. jobs between September 2017 and September
2021, and was the main job producer in 40 states.3 As digital information increases in importance
in the U.S. economy, issues related to digital trade have become of growing interest to Congress.
While there is no globally accepted definition of digital trade, the U.S. International Trade
Commission (USITC) broadly defines digital trade as:
The delivery of products and services over the internet by firms in any industry sector, and
of associated products such as smartphones and internet-connected sensors. While it
includes provision of e-commerce platforms and related services, it excludes the value of
sales of physical goods ordered online, as well as physical goods that have a digital
counterpart (such as books, movies, music, and software sold on CDs or DVDs).4
A joint report by the Organisation for Economic Cooperation and Development (OCED), World
Trade Organization (WTO), and International Monetary Fund (IMF) defined digital trade more
broadly as “all trade that is digitally ordered and/or digitally delivered.”5
The rules governing digital trade are evolving as governments across the globe experiment with
different approaches and consider diverse policy priorities and objectives. Barriers to digital
trade, such as data localization requirements or protectionist industrial policies, often overlap and
cut across sectors. In some cases, policymakers may struggle to balance digital trade objectives
with other legitimate policy issues, such as national security and privacy. Digital trade policy
issues have been in the spotlight recently, due in part to the rise of new trade barriers, heightened
concerns over data privacy, the rise of misinformation and disinformation, and an increasing
number of cybersecurity incidents that have affected U.S. consumers, companies, and
government entities. These concerns may raise the general U.S. interest in managing cross-border
data flows, enforcing compliance with existing rules, and establishing new ones. Congress has an
1 These estimates exclude free digital services. U.S. Bureau of Economic Analysis, Updated Digital Economy
Estimates – June 2021, June 2021. For more information, see https://www.bea.gov/data/special-topics/digital-economy.
2 Ibid.
3 Michael Mandel, “Tech-Ecommerce Drives Job Growth in Most States,” Progressive Policy Institute, October 18,
http://www.oecd.org/sdd/its/Handbook-on-Measuring-Digital-Trade-Version-1.pdf.
interest in ensuring the global rules and norms of the internet economy are in line with U.S. laws
and norms and allow for fair global competition for U.S. businesses and workers.
Trade negotiators continue to explore ways to address evolving digital issues in trade agreements,
including in the United States’ newest agreements, the U.S.-Mexico-Canada Agreement
(USMCA) and the U.S.-Japan Digital Trade Agreement. Congress has an important role in
shaping digital trade policy, including overseeing agencies charged with regulating cross-border
data flows, as part of trade negotiations, and in working with the executive branch to identify the
right balance between digital trade and other policy objectives.
This report discusses the role of digital trade in the U.S. economy, barriers to digital trade, digital
trade agreement provisions and negotiations, and other selected policy issues.
6 OECD, “A Roadmap Toward a Common Framework for Measuring the Digital Economy for G20 Digital Economy
Task Force,” Saudi Arabia, 2020, http://www.oecd.org/sti/roadmap-toward-a-common-framework-for-measuring-the-
digital-
economy.pdf?utm_source=Adestra&utm_medium=email&utm_content=A%20roadmap%20toward%20a%20common
%20framework%20for%20measuring%20the%20Digital%20Economy%20-
%20Read%20more&utm_campaign=Stats%20Flash%2C%20August%202020&utm_term=sdd.
7 U.S. Bureau of Economic Analysis, Updated Digital Economy Estimates – June 2021, June 2021. For more
https://internetworldstats.com/stats.htm.
9 Pew Research Center, Internet/Broadband Fact Sheet, April 7, 2021, at https://www.pewresearch.org/internet/fact-
sheet/internet-broadband/.
10 Statistica, “Percentage of mobile device website traffic in the United States from 1st quarter 2015 to 2nd quarter
4.5 million Google searches each minute in 2019.11 In 2020, the global population is estimated to
have generated 47 zettabytes of data – 534 million times the internet’s size in 1997.12
Cross-border data and communication flows are part of digital trade; they also facilitate trade and
the flows of goods, services, people, and finance, which together drive globalization and
interconnectedness. The highest levels reportedly are the flows between the United States and
Western Europe, Latin America, and China.13 Efforts to impede cross-border data flows could
decrease efficiency and other potential benefits of digital trade.
Powering all these connections and data flows are underlying ICT infrastructure.14 ICT spending
is a large and growing component of the international economy and essential to digital trade and
innovation. World trade in ICT physical goods grew to $2.3 trillion in 2020, with U.S. ICT goods
exports totaling $138 billion.15 U.S. exports of ICT goods accounted for 8.7% of total U.S. goods
exports in 2019.16
Semiconductors, a key component in many electronic devices, including systems that undergird
U.S. technological competitiveness and national security, are a top U.S. ICT export. With major
semiconductor manufacturing facilities in 18 states, the industry is estimated to employ almost a
11 Note: Google search is not available in all countries. OECD, “A Roadmap Toward a Common Framework for
Measuring the Digital Economy for G20 Digital Economy Task Force,” Saudi Arabia, 2020, at
https://www.oecd.org/sti/roadmap-toward-a-common-framework-for-measuring-the-digital-economy.pdf.
12 A zettabyte is one sextillion (1021) bytes. Digital Economy Compass 2019, Statista.com, at
https://www.statista.com/study/52194/digital-economy-compass/.
13 James Manyika, et al., “Digital globalization: The new era of global flows,” McKinsey, Global Institute, February
16, 2016.
14 ICT is an umbrella term that includes any communication device or application, including radio, television, cellular
phones, computer and network hardware and software, satellite systems, and associated services and applications.
15 United Nations Conference on Trade and Development (UNTAC), UNCTADstat, https://unctadstat.unctad.org/wds/
TableViewer/tableView.aspx?ReportId=15850.
16 World Bank, Table: ICT goods exports (% of total goods exports) - United States,
https://data.worldbank.org/indicator/TX.VAL.ICTG.ZS.UN?locations=US.
quarter million U.S. workers.17 The U.S. semiconductor industry dominates many parts of the
semiconductor supply chain, such as chip design, and it accounted for 48% (or $193 billion) of
the global market of revenue as of 2020.18 Industry forecasts expect continued strong annual
global sales growth of 19.7% in 2021 (to an estimated $527 billion) and a further 8.8% in 2022
(reaching $573 billion).19 The U.S. share of global semiconductor manufacturing capacity,
however, has declined from 37% in 1990 to 12% in 2020.20 Given the importance of
semiconductors to the digital economy and continued advances in innovation, many policymakers
see U.S. strength in semiconductor technology and fabrication as vital to U.S. economic and
national security interests and have raised concerns about the declining U.S. share in
semiconductor manufacturing capacity. Some U.S. policymakers have also expressed concerns
about China's state-led efforts to develop an indigenous vertically-integrated semiconductor
industry, in part to lessen the country’s dependence on U.S. exports.21
The growth in traded ICT services is outpacing the growth of traded ICT goods. The OECD
estimates that ICT services trade increased 40% from 2010 to 2016. 22 The United States is the
third-largest exporter of ICT services, after Ireland and India.23 ICT services include
telecommunications and computer services, as well as charges for the use of intellectual property
(e.g., licenses and rights). ICT-enabled services are those services with outputs delivered remotely
over ICT networks, such as online banking or education. ICT services can augment the
productivity and competitiveness of goods and services. U.S. ICT services are often inputs to
final demand products that may be exported by other countries, such as China. U.S. exports of
ICT services have grown almost every year since 2000 (see Figure 2).24 In 2020, U.S. exports of
ICT services grew to $84 billion of U.S. exports, while exports of potentially ICT-enabled
services totaled $520 billion, demonstrating the impact of the internet and digital revolution.25
Platzer, John F. Sargent Jr., and Karen M. Sutter, CRS Report R46767, China’s New Semiconductor Policies: Issues
for Congress, by Karen M. Sutter, and Cheng Ting-Fang and Lauly Li, “US-China tech war: Beijing's secret
chipmaking champions,” Nikkei Asia, May 5, 2021.
22 OECD (2017), OECD Digital Economy Outlook 2017, OECD Publishing, Paris, http://dx.doi.org/10.1787/
9789264276284-en.
23 Nationmaster, Top Countries in Exports of ICT Services, https://www.nationmaster.com.
24 Bureau of Economic Analysis, Table 3.1. U.S. Trade in ICT and Potentially ICT-Enabled Services, by Type of
delivered remotely over ICT networks, a subset of which are actually delivered via that method” and U.S. Bureau of
Economic Analysis (BEA), Table 3.1. U.S. Trade in ICT and Potentially ICT-Enabled Services, by Type of Service
October 19, 2018.
ICT and other online services depend on software; the value added to U.S. GDP from support
services and software has increased over the past decade relative to that of telecommunications
and hardware.26 According to one estimate, software contributed more than $1.9 trillion to the
total U.S. value added GDP in 2020 and the software industry accounted for 3.3 million jobs
directly in 2020, a 7.2% increase from 2018.27 According to an industry group, software and the
software industry contributes to jobs in all 50 states, with the value-added GDP of the software
industry growing more than 35% in Nevada and Washington from 2018 to 2020.28 The average
salary of a software developer is over $114,000.29 In addition, the software industry claims that
the sector funds 27% of all domestic research and development (R&D).30
26 BEA, Measuring the Digital Economy: An Update Incorporating Data from the 2018 Comprehensive Update of the
Industry Economic Accounts, March 2018, p.9.
27 Ibid.
content/uploads/2019SoftwareJobs.pdf.
29 Ibid.
through-covid-2021/.
and/or lower the costs and barriers related to flows of traditional goods and services. For
example, some refer to the application of emerging technologies as the Fourth Industrial
Revolution (4IR), as companies may rely on radio-frequency identification (RFID) tags and
blockchain for global supply chain tracking, 3-D printing based on data files, robotics for
manufacturing, or devices or objects connected via the Internet of Things (IoT), and data
analytics driven by artificial intelligence (AI) (see text box on key technology terms). In addition,
digital platforms serve as intermediaries for multiple forms of digital trade, including e-
commerce, social media, and cloud computing and allow businesses to reach customers around
the globe. In these ways, digitization pervades every industry sector, creating challenges and
opportunities for established and new players.
In an international context, one source estimates that digitally-enabled trade in 2019 was worth
$800 billion to $1.5 trillion (3.5%-6.0% of global trade).31 Furthermore, up to 70% of all global
trade flows could “eventually be meaningfully affected by digitization.” One think tank
categorizes these trade flows to include digitally-sold trade (e.g., e-commerce), digitally-
enhanced trade (e.g., services such as movie streaming or car maintenance monitoring that
complement physical goods), and digitally-native trade (e.g., non-fungible token (NFT) or
cryptocurrency purchase of digital art or digital platforms).
These estimates do not quantify the additional benefits of digitization for business efficiency and
productivity, or of increased customer and market access, which enable greater volumes of
international trade in all sectors of the economy. Technology advancements have helped drive
efficiency and automation across diverse U.S. industries, but may raise other policy
considerations, such as their impact on employment in the manufacturing sector. Digitization
efficiencies have the potential to both increase international trade and decrease costs. For
example, one analysis found that logistics optimization technologies could reduce shipping and
customs processing times by 16% to 28%, boosting overall trade by 6% to 11% by 2030.32 A
31Christian Ketels, et al., “Global Trade Goes Digital,” Boston Consulting Group, August 12, 2019.
32Susan Lund, et at., “Globalization in Transition: The Future of Trade and Value Chains,” McKinsey & Company,
January 2019 Commercial Assistant - Open to: All Interested Applicants / All Sources
study of small and medium-sized enterprises (SMEs) in Asia found that digital tools reduced
export costs by 82%, and transaction times by 29%.33
One example of digitization driving efficiencies is the use of AI to help companies forecast
demand, understand trends and identify patterns, and allow companies to quickly adjust shipping
routes or optimize supply chains when confronted with disruptions or unexpected events.34 For
example, during the COVID-19 pandemic, Samsung noted that “we inserted COVID-specific
information, such as closed stores and traffic changes due to the pandemic, into the AI tool to
predict the demands more accurately in each region.”35 At the same time, automation, AI, and 3-D
printing could enable more local production, thereby reducing global trade by as much as 10% by
2030.36
Blockchain is one emerging software technology some companies are using to increase efficiency
and transparency and lower supply chain costs that depends on open data flows of digital trade.37
For example, it is helping services industries, such as insurance, become more efficient by
utilizing smart contracts based on blockchain to respond real-time to customers’ claims or to
streamline fraud mitigation processes.38 Another example is how, in an effort to streamline
processes, save costs, and improve public health outcomes, Walmart and IBM built a blockchain
platform to increase transparency of global supply chains and improve traceability for certain
imported food products.39 The initiative aims to expand to include several multinational food
suppliers, farmers, and retailers and depends on connections via the IoT and open international
data flows.
The work schedule for this position is: Full Time (40 hours per week) Start date: Candidate must be able to begin
working within a reasonable period of time of receipt of agency authorization and/or clearances/certifications or their
candidacy may end.
Salary:
(GBP) £54,805/Per Year
Series/Grade:
LE - 1510 - 7
Agency:
Embassy London
Position Info:
Location:
London, UK
Close Date:
(MM/DD/YYYY)
01/09/2022.
33 AlphaBeta, “Micro-Revolution: The New Stakeholders of Trade in APAC,” Asia Pacific MSME Trade Coalition,
February 2018.
34 James Rundle, “Supply Chain Strains Sharpen Focus on AI,” The Wall Street Journal, March 31, 2021.
35 Edward White, “Companies try to cut geopolitical risk from supply chains,” The Financial Times, April 6, 2021.
36 Ibid.
37 For more on blockchain, see CRS Report R45116, Blockchain: Background and Policy Issues, by Chris Jaikaran.
38 Adelyn Zhou, “How Blockchain Smart Contracts Are Reinventing the Insurance Industry,” Nasdaq, January 29,
2021, and Gemini, “Blockchain and the Insurance Industry,” Cryptopedia, March 24, 2021.
39 Walmart, “Food Traceability Initiative Fresh Leafy Greens,” letter to suppliers, September 24, 2018,
https://corporate.walmart.com/media-library/document/blockchain-supplier-letter-september-
2018/_proxyDocument?id=00000166-088d-dc77-a7ff-4dff689f0001.
According to one global estimate, there are 26 billion internet-connected vehicles, industrial
equipment and household items that could transmit data for companies and government to
analyze to improve processes and outcomes, whether efficiency or consumer welfare.40 Software
drives these connected products, merging the physical and digital world and facilitating the
delivery of new global services embedded in products. The overall and long-term impact of
digitization has yet to be seen. One think tank estimates that 60% of global GDP will be digitized
by 2022, with growth in every industry driven by data flows and digital technology.41
Because of its ubiquity, the benefits and economic impact of digitization are not restricted to
certain geographic areas, and businesses and communities in every U.S. state feel the impact of
digitization, as new business models and jobs are created and existing ones are disrupted.42 For
example, a small business that uses accounting software may no longer need to employ a
bookkeeper, while a neighborhood store may confront new competition from online sellers based
in other countries, but also develop its own online sales channel. One study found that the more
intensively a company uses the internet, the greater the productivity gain. The increase in internet
usage is also associated with increased value and diversity of products being sold.43
One driver of the diffusion of the benefits of the internet and digitization has been cloud
computing. Cloud services have been called the great equalizer, since they generally allow small
companies access to the same information and the same computing power as large firms using a
flexible, scalable, and on-demand model. In 2020, the global cloud computing market was
estimated to be worth $130 billion annually—dominated by U.S. and Chinese firms, with
Amazon Web Services (AWS) as the world’s largest supplier (see Figure 3).44
40 Hosuk Lee-Makiyama and Kimberley Botwright, “5 ways to ensure trust when moving data across borders,” World
Economic Forum, April 13, 2021.
41 Frank Gens, et al., “IDC FutureScape: Worldwide IT Industry 2019 Predictions,” October 2018.
42 John Wu, Adams Nager, and Joseph Chuzhin, High-Tech Nation: How Technological Innovation Shapes America’s
publication/wdr2016.
44 Synergy Research Group, “Race for the Cloud,” Politico, April 22, 2021.
Source: Synergy Research Group, “Cloud Market Ends 2020 on a High while Microsoft Continues to Gain
Ground on Amazon,” February 2, 2021.
Digital platforms can minimize costs and enable SMEs to grow through extended reach to
customers or suppliers or by integrating into global value chains (GVCs). For example, Amazon
notes that hundreds of thousands of SMEs launch and scale their businesses using AWS and that
SMEs selling on Amazon.com have created an estimated 1.1 million jobs.45 Netflix, a U.S. firm
offering online streaming services, earned more revenue from international markets than from the
U.S. domestic market in the first quarter of 2021.46
Digitization of customs and border control mechanisms also may help simplify and speed
delivery of goods to customers. Regulators are looking to blockchain technology to improve
efficiency in managing and sharing data for functions such as border control and customs
processing of international shipments.47 With simpler border and customs processes, more firms
are able to conduct business in global markets (or are more willing to do so). A study of U.S.
SMEs on the e-commerce platform eBay found that 96% export to an average of 17 foreign
countries.48 Digital trade facilitation (e.g., digitizing customs, legal documents, and supply chain
finance) has gained prominence on the international trade agenda, as policymakers and businesses
seek to enable export opportunities for SMEs.
https://ir.netflix.net/ir-overview/profile/default.aspx.
47 Commercial Customs Operations Advisory Committee (COAC), Trade Progress Report, November 2017,
https://www.cbp.gov/sites/default/files/assets/documents/2017-Nov/
Global%20Supply%20Chain%20Subcommittee%20Trade%20Executive%20Summary%20Nov%202017.pdf.
48 Cathy Foster, “eBay’s 2020 U.S. Small Online Business Report: How We’re Creating Economic Opportunity,” July
A similar argument has been made for firms and governments in low- and middle-income
countries who can take advantage of the power of the internet to foster economic development. In
the Asia-Pacific Economic Cooperation (APEC) region, which includes the United States, for
example, SMEs account for over 97% of all business and employ over half of the workforce.49
Recognizing the importance of digitization, APEC officials agreed to focus on initiatives to
develop the digital potential of Micro, Small and Medium Enterprises (MSMEs), including
women-owned businesses.50 A 2011 study of SMEs estimated that the internet is a net creator of
jobs, with 2.6 jobs created for every job that may be displaced by internet technologies;
companies that use the internet intensively effectively doubled the average number of jobs.51 As
technology has evolved since 2011, the job impact may be greater today, but the benefits and
costs of digitization and digital trade can vary across sectors.
49 Https://www.apec.org/Groups/SOM-Steering-Committee-on-Economic-and-Technical-Cooperation/Working-
Groups/Small-and-Medium-Enterprises.
50 2020 APEC SME Ministerial Statement, “Navigating the New Normal: Restarting and Reviving MSMEs through
growth, jobs, and prosperity, McKinsey Global Institute, May 2011, p. 21, http://www.mckinsey.com/industries/high-
tech/our-insights/internet-matters.
52 WTO, “Trade in Services in the Context of COVID-19,” May 28, 2020.
53 Ibid.
54 For more information and examples see, WTO, COVID-19: Measures affecting trade in services,
https://www.wto.org/english/tratop_e/covid19_e/trade_related_services_measure_e.htm.
55 WTO, “Services trade slump persists as travel wanes; other service sectors post diverse gains,” July 23, 2021.
56 Angus Loten, “Tech Workers Fear Their Jobs Will Be Automated in Wake of Coronavirus,” The Wall Street Journal,
The growth in online services and automation created increased demand for the ICT goods that
enable such shifts (e.g., laptops for e-learning and telework), leading to a surge in semiconductor
demand, which outstripped supply.58 Auto plants in particular were hit hard, after the industry
initially lowered their purchases of semiconductors during initial pandemic lockdowns, reflecting
lower customer demand for autos. When demand began to grow as countries opened up,
automakers around the world found themselves without needed components, leading many to
decrease or stop auto production altogether.59 Many U.S. policymakers and other observers have
called for increased investment in semiconductor manufacturing to power the shift online and to
further digital advancements.60
The pandemic further underscored ongoing digital challenges in the United States and across the
world. For example, mitigation efforts, such as the switch to online shopping, education, and
telemedicine, revealed discrepancies in broadband availability and accessibility—termed the
digital divide—across the United States.61
Digitization Challenges
The importance of digitization to the U.S. economy is expected to grow. Many in business and
research communities are only beginning to understand how to take advantage of the vast
amounts of data being collected every day, one important aspect of the digital economy. One
study estimates companies are using 32% of data available to them to create value.62
While new technologies and new business models present opportunities to enhance efficiency and
expand revenues, innovate faster, develop new markets, and achieve other benefits, new
challenges also arise with the disruption of supply chains, labor markets, and some industries. A
2020 study found that, in the United States and United Kingdom, almost 20% of jobs are in ICT-
intensive occupations, highlighting the importance of a digitally-skilled workforce.63 Another
found a mismatch between workforce skills and job openings—67% of new U.S. science,
technology, engineering, and mathematics (STEM) jobs are in computing whereas 11% of STEM
degrees are in computer science.64
With the rapid pace of technology innovation, more jobs may become automated, with digital
skills becoming a foundation for economic growth for individual workers, companies, and
Journal, April 8, 2021. For more information on semiconductors, see CRS Report R46581, Semiconductors: U.S.
Industry, Global Competition, and Federal Policy, by Michaela D. Platzer, John F. Sargent Jr., and Karen M. Sutter.
60 See CRS Report R46581, Semiconductors: U.S. Industry, Global Competition, and Federal Policy, by Michaela D.
Broadband: Potential Implications for the Digital Divide, by Colby Leigh Rachfal.
62 Seagate, “Rethink Data: Put More of Your Business Data to Work – From Edge to Cloud,” July 2020,
https://www.seagate.com/files/www-content/our-story/rethink-data/files/Rethink_Data_Report_2020.pdf.
63 OECD, “A Roadmap Toward a Common Framework for Measuring the Digital Economy for G20 Digital Economy
https://code.org/promote.
national GDP.65 An OECD survey found that most countries, except the United States, have
federal policies to promote the use of digital technologies by businesses.66 A separate OECD
study found that, in general, SMEs tend to lag in some areas of digitization.67 The report includes
policy recommendations, such as government investments in awareness campaigns and
technology training, as well as the development of SME-tailored digital solutions. 68
The World Bank identified policy areas to try to ensure, and maintain, the potential benefits of the
digital economy.69 These policy areas include establishing a favorable and competitive business
climate, developing strong human capital, ensuring good governance, investing to improve both
physical and digital infrastructure, and raising digital literacy skills. Some countries have
established national digital strategies (NDSs) to help governments shape the way digital
transformation takes place in a country that define policy priorities, set objectives and outline
actions for implementation.70 Although the United States lacks an overarching digital strategy,
according to the World Economic Forum’s 2020 Global Competitiveness Report, the United
States is ranked number one for “digital legal framework” (the U.S. legal framework is able to
adapt to digital business models), but it is not in the top ten countries for “digital skills” (a high
percentage of the U.S. workforce may not be able to adapt to digitization due to a lack of digital
skills).71
65 The World Bank Group, World Development Report 2016: Digital Dividends, 2016, http://www.worldbank.org/en/
publication/wdr2016.
66 OECD (2020), OECD Digital Economy Outlook 2020, OECD Publishing, Paris, https://doi.org/10.1787/bb167041-
en.
67 OECD (2021), The Digital Transformation of SMEs, OECD Studies on SMEs and Entrepreneurship, OECD
69 The World Bank Group, World Development Report 2016: Digital Dividends, 2016, http://www.worldbank.org/en/
publication/wdr2016.
70 OECD (2020), OECD Digital Economy Outlook 2020, OECD Publishing, Paris, https://doi.org/10.1787/bb167041-
en.
71 World Economic Forum, Global Competitiveness Report Special Edition 2020: How Countries are Performing on
March 28, 2018, or Keith Wright, “The ‘splinternet’ is already here,” TechCrunch, March 3, 2019.
enabling the internet; (2) boosting or preserving competition within and outside the internet; and
(3) protecting privacy and consumers more generally.73
Ensuring the free flow of information and open internet and defending freedom of online
expression are longstanding U.S. policy priorities.74 Like other cross-cutting policy areas, such as
cybersecurity or privacy, no one federal entity has policy primacy in every area of digital trade,
and the United States has taken a sectoral approach to regulating digitization. According to an
OECD study, the United States is the only OECD country that uses a decentralized, market-driven
approach for a digital strategy, rather than having an overarching national digital strategy, agenda,
or program.75
The executive branch advocates for U.S. digital priorities and noted many of them, such as
working with allies to counter digital authoritarianism and establish international rules for
emerging technologies, in its National Security Strategy report.76 Federal agencies identify and
challenge foreign trade barriers through trade negotiations. The Department of Commerce works
to promote U.S. digital trade policies domestically and abroad. Commerce’s digital attaché
program under its foreign commercial service helps U.S. businesses navigate regulatory issues
and overcome trade barriers to e-commerce exports in key markets.77
The U.S. Trade Representative (USTR), a Cabinet-level official in the Executive Office of the
President, is the President’s principal advisor on trade policy, chief U.S. trade negotiator, and
head of the interagency trade policy coordinating process. In describing the Biden
Administration’s worker-centric digital trade policy, USTR Katherine Tai stated that “our efforts
to formulate and pursue digital trade policies should, therefore, begin with a high level of
ambition to be holistic and inclusive,” and that “digital trade policy must be grounded in how it
affects our people and our workers.”78 She explained that in defining the Administration’s digital
trade policy, USTR is asking “big and consequential questions,” including on the linkage with
national security, domestic, and foreign policy interests; how best to work with allies; and how to
balance the right of governments to regulate with the need for international trade rules.79
In passing Trade Promotion Authority (TPA) in 2015, Congress set negotiating objectives for
USTR to pursue in trade negotiations, including related to digital trade (see text box).
73 Koske, I. et al. (2014), “The Internet Economy—Regulatory Challenges and Practices,” OECD Economics
Department Working Papers, No. 1171, OECD Publishing, Paris. DOI, http://dx.doi.org/10.1787/5jxszm7x2qmr-en.
74 Https://www.state.gov/world-press-freedom-day/.
75 OECD (2017), OECD Digital Economy Outlook 2017, OECD Publishing, Paris, p. 34, http://dx.doi.org/10.1787/
9789264276284-en.
76 The White House, Interim National Security Strategic Guidance, March 2021, https://www.whitehouse.gov/wp-
content/uploads/2021/03/NSC-1v2.pdf.
77 For more information, see https://www.export.gov/digital-attache.
78 U.S. Trade Representative, Remarks of Ambassador Katherine Tai on Digital Trade at the Georgetown University
As with traditional trade barriers, digital trade constraints can be classified as tariff or nontariff
barriers. Tariff barriers may increase the cost of imported goods used to create ICT infrastructure
that make digital trade possible or on the products that allow users to connect, while nontariff
barriers, such as discriminatory regulations or local content rules, can block or limit different
aspects of digital trade. Such barriers may be intended to shield domestic producers and suppliers,
safeguard national security, or protect consumer safety.
80 The Geneva Ministerial Declaration on global electronic commerce, WT/MIN(98)/DEC/2, May 25, 1998.
More recently, noting the growth of the digital economy, some countries, particularly in Europe
and Asia, have proposed, announced, or implemented unilateral digital services taxes (DSTs) on
the gross revenues earned by multinational corporations (MNCs) active in the digital economy.
For example, France enacted a DST that applies a 3% levy on gross revenues derived from two
digital activities of which French “users” are deemed to play a major role in value creation. Some
countries have argued that such DSTs can serve as a market access barriers. USTR concluded that
France's DST discriminates against major U.S. digital companies and is inconsistent with
prevailing international tax policy principles.82
In June 2021, the United States and more than 130 countries agreed to update the global tax
system and develop an international digital tax framework at the OECD. In support of the G-
20/OECD Inclusive Framework negotiations, in June 2021, the United States and other G-7
countries announced agreement on (1) how to allocate taxing rights of the largest and most
profitable multinational enterprises, including digital companies, and (2) a global minimum tax.83
In October, the United States reached a compromise— the “Agreement on DSTs”—with several
European countries to withdraw their national DSTs once the multilateral deal goes into effect
and to credit companies with any excess taxes paid. As part of it, the United States agreed to
terminate the currently-suspended Section 301 trade actions against Austria, France Italy, Spain,
and the UK.84 The United States reached a similar agreements with Turkey and India in
November.85 The USTR, in coordination with the U.S. Department of the Treasury, is to monitor
the implementation of the agreement.
81 U.S. Trade Representative, 2021 National Trade Estimate Report on Foreign Trade Barriers, March 31, 2021, p.
282, https://ustr.gov/sites/default/files/files/reports/2021/2021NTE.pdft.
82 For more information on the USTR investigations, see CRS In Focus IF11564, Section 301 Investigations: Foreign
Austria, France, Italy, Spain, and the United Kingdom, Regarding a Compromise on a Transitional Approach to
Existing Unilateral Measures During the Interim Period Before Pillar 1 is in Effect, October 21, 2021, and USTR,
USTR Announces, and Immediately Suspends, Tariffs in Section 301 Digital Services Taxes Investigations, Press
release, June 2, 2021.
85 U.S. Trade Representative, USTR Welcomes Agreement with Turkey on Digital Services Taxes, November 22, 2021,
and USTR Welcomes Agreement with India on Digital Services Taxes, November 24, 2021.
Nontariff Barriers
Nontariff barriers (NTBs) are not as easily quantifiable or identifiable as tariffs. Like digital trade,
NTBs to digital trade have evolved and may pose significant hurdles to companies seeking to do
business abroad. NTBs often called “behind the border” trade barriers come in the form of laws
or regulations that intentionally or unintentionally discriminate against and/or hamper the free
flow of digital trade.
Localization Requirements
Localization measures are defined as measures that compel companies to conduct certain digital-
trade-related activities within a country’s borders.86 Governments often use privacy protection or
national security arguments as justifications for these measures. Though some localization
policies may be used to achieve legitimate public policy objectives, including national security or
personal data protection, some are designed to protect, favor, or stimulate domestic industries,
service providers, or intellectual property at the expense of foreign counterparts and, in doing so,
function as NTBs to market access. In recent FTAs, the United States has aimed to ensure an open
86U.S. International Trade Commission, Digital Trade in the U.S. and Global Economies, Part 1, Publication No:
4415, Investigation No: 332-531, July 2013, p. 16, https://www.usitc.gov/publications/332/pub4415.pdf.
internet and eliminate digital trade barriers, while preserving flexibility for governments to pursue
legitimate policy objectives (see below).
87 U.S. International Trade Commission, Global Digital Trade 1: Market Opportunities and Key Foreign Trade
Restrictions, Investigation Number: 332-561, August 2017, https://www.usitc.gov/publications/332/pub4716.pdf, and
David Nguyen and Marta Paczos, “Measuring the Economic Value of Data and Cross-Border Data Flows: A Business
Perspective,” OECD Digital Economy Papers No. 297, August 2020.
88 Hosuk Lee-Makiyama and Simon Lacey, “Cross-Border Data Flows: The impact of data localisation on IoT,”
Rachel F. Fefer.
91 See CRS Report RL34292, Intellectual Property Rights and International Trade, by Shayerah I. Akhtar, Ian F.
Fergusson, and Liana Wong.
92 Robert D. Atkinson, “IP Protection in the Data Economy: Getting the Balance Right on 13 Critical Issues,” ITIF,
January 2019. In some cases, patents and trademarks may be complementary, with patents protecting the primary
invention and trade secrets protecting the related “know-how.”
93 International Chamber of Commerce (ICC), The ICC Intellectual Property Roadmap, 2020, p. 74.
USITC has identified the infringement of IPR associated with digital products or services as
digital trade barriers. USITC has noted that poor IPR protection in a country’s legal framework or
the weak enforcement of such IPR can lead to extensive digital piracy, which can potentially limit
“the profitability and commercial viability of digital content providers.”94 USTR identifies
specific concerns about digital piracy in its latest annual “Special 301” review of foreign
countries’ IPR regimes (see text box).95 Increased use of digital services and related demand
shifts during the COVID-19 pandemic have stressed IPR regimes and exacerbated IPR
infringement concerns.96
The losses from IPR infringement in the digital environment are considered to be significant, but
difficult to quantify and depend on various assumptions, including the extent to which IPR
infringement actually displaces legal sales.97 In 2017, the Commission on the Theft of American
Intellectual Property estimated that the value of the annual cost to the U.S. economy from three
major categories of IP theft surpasses $225 billion and could be as high as $600 billion. The three
categories were: counterfeit and pirated tangible, traded goods (low-end estimate of $29 billion,
high-end of $41 billion); pirated U.S. software (estimated value of $18 billion); and trade secret
theft (low-end estimate of $180 billion, high-end estimate of $540 billion).98 A 2018 report by
McAfee and the Center for Strategic and International Studies (CSIS) estimated annual losses
from cyber theft of IP to be $10 billion to $12 billion in the United States, and $50 billion to $60
94 USITC, Global Digital Trade 1: Market Opportunities and Key Foreign Trade Restrictions, August 2017, p. 17.
95 See U.S. Trade Representative, 2021 Special 301 Report, April 2021.
96 USITC, Recent Trends in U.S. Services Trade: 2021 Annual Report, p. 104.
97 Brett Danaher, Michael D. Smith, and Rahul Telang, “Piracy Landscape Study: Analysis of Existing and Emerging
Research to Intellectual Property Rights (IPR) Enforcement of Commercial-Scale Piracy,” USPTO, USPTO Economic
Working Paper Series, April 2020.
98 These estimates do not include patent infringement. Commission on the Theft of American Intellectual Property (“IP
Commission,” which characterizes itself as an independent, bipartisan initiative of members from the public and private
sector), The Theft of American Intellectual Property: Reassessments of the Challenge and U.S. Policy—Update to the
IP Commission Report, 2017.
billion globally.99 Various industry groups have also honed in on the specific impact of IP theft to
themselves. For instance, a 2019 industry report estimated that global digital video piracy reduces
revenue to the U.S. content and distribution sectors by between $29 billion and $71 billion per
year.100
Many stakeholders call for trading partners to have “robust” IPR frameworks to support digital
trade. However, they debate the appropriate balance for legal frameworks to protect IPR to
incentivize innovation and also set limitations and exceptions to ensure other economically and
socially valuable uses. Issues include trading partners’ approaches to “fair use”-type exceptions to
copyrights and online intermediaries’ liability for IPR infringing content and limitations on that
liability.101 Copyright industries assert that that “[t]he success of the creative community in digital
trade depends on strong copyright laws and enforcement practices that foster a legitimate online
economy.”102 They criticize what they view as overly broad exceptions to copyrights and
limitations on the liability of online intermediaries for infringing activity on their networks. In
contrast, internet and other technology companies, and some stakeholders support what they view
as clear, consistent, and “balanced” copyright protections that include “fair use” 103 and “safe
harbors” for ISPs, which they argue are necessary for the smooth functioning of internet services
and for developing future technologies.104
Other IPR-related barriers to digital trade include government measures, policies, and practices
that are intended to promote domestic “indigenous innovation” (i.e., develop, commercialize, and
purchase domestic products and technologies) but that can also disadvantage and discriminate
against foreign companies. These measures can be linked to “forced” localization barriers to
trade. China, for instance, conditions market access, government procurement, and the receipt of
certain preferences or benefits on a firm’s ability to show that certain IP is developed in China or
is owned by or licensed to a Chinese party. Another example is India’s data and server
localization requirements, which U.S. firms assert hurt market access and innovation in their
sector (see above).
99 James Lewis, Economic Impact of Cybercrime–No Slowing Down, Center for Strategic and International Studies
(CSIS) in partnership with McAfee, February 2018.
100 David Blackburn, Jeffrey A. Eisenach, and David Harrison, Impact of Digital Video Piracy on the U.S. Economy,
Nera Economic Consulting and Global Innovation Policy Center of U.S. Chamber of Commerce, June 2019.
101 E.g., through “notice and takedown”-type laws that potentially make online intermediaries liable if they continue to
display infringing content after notification from the copyright holder, as well as place limitations on that liability
through “safe-harbor” if intermediaries take appropriate action to removing infringing content.
102 IIPA, “IIPA 2021 Special 301 Report on Copyright Protection and Enforcement,” submitted January 28, 2021 to
USTR, p. 4.
103 E.g., exceptions to copyright liability, which allow Internet to scan the Web, make a copy for indexing purposes,
and make that copy available for search, without engaging in copyright piracy.
104 Internet Association, “Submission for the 2021 USTR National Trade Estimate Report,” October 29, 2020;
Comments of the Computer & Communications Industry Association (CCIA), in response to USTR Request for Public
Comments and Notice of a Public Hearing Regarding the 2021 Special 301 Review, Docket No. USTR-2020-0041.
105 Standards refer to product features, technical specifications, or usage guidelines that allow different products or
services available to a wide range of users. Standards can be designed to make specific products compatible with others
(e.g. electrical outlet and plug configurations) or designed to apply to entire organizations or industrial sectors (e.g.
for example, may not be able to connect to a local network or device based on a local or
proprietary standard. Also, proprietary standards can limit a firm’s ability to serve a market if
their company practices or assets do not conform with (nor do their personnel have training in)
those standards. As a result, U.S. companies may not be able to reach customers or partners in
those countries.
Similarly, redundant or burdensome conformity assessment or local registration and testing
requirements often add time and expense for a company trying to enter a new market, and serve
as a deterrent to foreign companies. For example, India’s Compulsory Registration Order (CRO)
mandates that manufacturers register their products with laboratories affiliated with or certified
by the Bureau of Indian Standards, even if the products have already been certified by accredited
international laboratories. The requirement is an often-cited concern for U.S. businesses facing
delays getting products to market in India, which may grow as the list of products covered was
expanded again in 2020.106 Qatar requires a license from telecommunications providers to provide
Voice over Internet Protocol (VoIP) services, reserving them for companies intending to charter in
Qatar, while Egypt requires media outlets, including social media accounts with at least 5,000
subscribers, to pay a fee of 50,000 Egyptian pounds (approximately $2,800) to get a license to
gain legal status.107 If a company is required to provide the source code, proprietary algorithms,
or other IP to gain market access, it may fear theft of its IP and not enter that market (see above).
health and safety or IT security standards). For a more in-depth discussion of what constitutes a technical standard, see
British Standards Institution, “What is a standard?”, accessed March 12, 2021, https://www.bsigroup.com/en-
US/Standards/Information-about-standards/What-is-a-standard/.
106 2021 National Trade Estimate Report on Foreign Trade Barriers, Office of the United States Trade Representative,
March 2021.
107 Ibid.
108 Yu Nakamura, “China’s war on VPNs creates havoc at foreign companies,” December 17, 2017.
109 Cate Cadell, “Amid VPN crackdown, China eyes upgrades to Great Firewall,” Reuters, July 20, 2017; Celia Chen,
“Chinese VPN user fined for accessing overseas websites as part of Beijing’s ongoing ‘clean up’ of internet,” South
China Morning Post, January 7, 2019.
web domains, including 1,800 of the world’s top 100,000 websites, limiting the access of Chinese
businesses and consumers to foreign online content, internet infrastructure, and digital services.110
While China is the most well-known in its efforts to control its domestic internet, it is not alone in
seeking to limit access to websites. For example, Pakistan periodically blocks internet access to
services hosting content deemed to be blasphemous or immoral on grounds that such services can
be used to undermine national security. Russia’s Sovereign Internet Law gives the Russian
Government the authority to establish an alternate domain name system for Russia, which would
allow them to cut off the Russian segment of the internet from the global internet under certain
circumstances.111 In April 2021, Twitter removed certain “banned content” after Russia’s media
regulator slowed its internet traffic.112
Several U.S. and foreign policymakers have expressed concern about the influence that violent or
harmful content online may have upon those who view or read it. In response, some countries
have introduced legislation to regulate internet content, for example, to fight the impact and
spread of violent material and false information.113 In the United States, significant First
Amendment freedom of speech issues are raised by the prospect of government restrictions on the
publication and distribution of speech, even speech that advocates terrorism.114 As a result, what
users can access online may vary across countries, depending on national policy and preferences.
These differences illustrate the complexity of the internet and evolving technologies, and the lack
of global standards that prevails in other areas of international trade.
National-level net neutrality policies also differ widely. Net neutrality rules govern the
management of internet traffic as it passes over broadband internet access services, whether those
services are fixed or wireless. Allowing internet access providers to limit or otherwise
discriminate against content providers, foreign and domestic, may create a nontariff barrier.115 In
the United States, the Federal Communications Commission (FCC) classification of broadband
internet service providers (ISPs) has been controversial domestically and may differ from how
U.S. trading partners regulate ISPs.
Cybersecurity Risks
The growth in digital trade has raised issues related to cybersecurity, the act of protecting ICT
systems and their contents from cyberattacks. Cyberattacks in general are deliberate attempts by
unauthorized persons to access ICT systems, usually with the goal of theft, disruption, damage, or
other unlawful actions and disrupting business operations. Cybersecurity can also be an important
tool in protecting privacy and preventing unauthorized surveillance or intelligence gathering.116
110 Catalin Cimpanu, “China’s Great Firewall is blocking around 311,000 domains, 41k by accident,” The Record, July
11, 2021.
111 U.S. Trade Representative, 2021 National Trade Estimate Report on Foreign Trade Barriers, March 2021.
112 Leonie Cater, “Russia says Twitter complying with most takedown orders,” PoliticoPro, April, 30, 2021.
113 European Commission, European Commission Guidance on Strengthening the Code of Practice on Disinformation,
COM(2021) 262 final, May 26, 2021, and United Kingdom Department for Digital, Culture, Media & Sport. Draft
Online Safety Bill, CP 405, May 12, 2021.
114 For more information, see CRS Report R44626, The Advocacy of Terrorism on the Internet: Freedom of Speech
Issues and the Material Support Statutes, by Kathleen Ann Ruane and CRS Report R46751, Section 230: An Overview,
by Valerie C. Brannon and Eric N. Holmes .
115 For more information on net neutrality, see CRS Report R40616, The Federal Net Neutrality Debate: Access to
Eric A. Fischer, and CRS In Focus IF10559, Cybersecurity: A Primer, by Chris Jaikaran.
Although there is overlap between data protection and privacy, the two are not equivalent.
Cybersecurity measures are essential to protect data (e.g., against intrusions or theft by hackers).
However, they may not be sufficient to protect privacy.
Cyberattacks can pose broad risks to financial and communication systems, national security,
privacy, and digital trade and commerce.117 According to one study of global organizations, 94%
had experienced a business-impacting cyberattack in the prior 12 months.118 Another survey by
IBM Security found that data breach incidents cost companies studied $3.86 million per breach
on average, and compromised employee accounts were the most expensive root cause.119
Cybersecurity risks run across all industry sectors that rely on digital information. In March 2020,
U.S. cybersecurity firm FireEye stated that Chinese state-tied actor APT41 conducted a broad
cyber espionage campaign.120 APT41’s targets spanned a diverse set of industries, including
finance, construction, health care, manufacturing, and advanced technologies tied to China’s
industrial planning initiatives, such as Made in China 2025.121 In September 2020, the
Department of Justice indicted five Chinese nationals believed to be part of APT41, charging
them with multiple counts of conspiracy, aggravated identity theft, money laundering among
other charges in connection to cyber intrusion campaigns.122
Recent cybersecurity compromises of private sector companies that supply services to the public
sector demonstrate the links and potential vulnerability of federal systems and critical
infrastructure. For example, SolarWinds makes IT management products for business customers
and provides updates and patches to users. When FireEye published research in January 2021 that
a malicious actor was exploiting a vulnerability in SolarWinds update service to hack into
government and private sector information technology networks, Cybersecurity and Infrastructure
Security Agency (CISA) issued an emergency directive requiring federal agencies to remove
certain SolarWinds products from agency networks and take other actions.123 After a widescale
cyber-attack linked to Chinese state-tied cyber threat actors on Microsoft VPN networks across
the United States was uncovered in March 2021, the U.S. government and several U.S. allies
accused China of “irresponsible and destabilizing behavior in cyberspace.”124 In response, the
Department of Justice indicted four PRC nationals who engaged in a state-sponsored hacking
117 Council of Economic Advisers, The Cost of Malicious Cyber Activity to the U.S. Economy, February 2018,
https://www.whitehouse.gov/wp-content/uploads/2018/02/The-Cost-of-Malicious-Cyber-Activity-to-the-U.S.-
Economy.pdf.
118 Tenable Holdings, “Ninety-Four Percent of Organizations Have Experienced At Least One Business-Impacting
Cyberattack in the Past 12 Months, According to New Industry Study,” August 5, 2020.
119 IBM, “IBM Report: Compromised Employee Accounts Led to Most Expensive Data Breaches Over Past Year,”
With Computer Intrusion Campaigns Against More Than 100 Victims Globally, Department of Justice, September 16,
2020, https://www.justice.gov/opa/pr/seven-international-cyber-defendants-including-apt41-actors-charged-connection-
computer.
123 For more information, see CRS Insight IN11559, SolarWinds Attack—No Easy Fix, by Chris Jaikaran.
124 The White House, “The United States, Joined by Allies and Partners, Attributes Malicious Cyber Activity and
Irresponsible State Behavior to the People’s Republic of China,” press release, July 19, 2021, and Zolan Kanno-
Youngs and David E. Sanger, “U.S. Accuses China of Hacking Microsoft,” The Washington Post, August 26, 2021.
campaign affiliated with the PRC Ministry of State Security and the Hainan State Security
Department targeting U.S. companies.125
Companies that rely on cloud services to store or transmit data may choose to use enhanced
encryption to protect the communication and privacy, both internally and of their end customers.
This, in turn, may impede law enforcement investigations if they are unable to access the
encrypted data.126 However, restrictions on the ability for a firm to use encryption may make a
company vulnerable to cyberattacks or cybertheft, demonstrating the need for policies and
regulations to balance competing objectives.
In May 2021, the United States proposed that the WTO Technical Barriers to Trade Committee
begin to explore the “landscape of… views on cybersecurity regulation” to identify and promote
the application of regulatory approaches that are aligned with WTO principles such as the use of
international standards and best practices to maximize security, trade, and innovation outcomes.127
European Union
Differences in U.S. and EU policies have ramifications on digital flows and international trade.
The two partners’ varying approaches to digital trade, privacy, and national security, have, at
times, threatened to disrupt U.S.-EU data flows.
The United States and the EU have a significant, highly integrated economic relationship and are
each other’s largest overall trade and foreign direct investment (FDI) partners.128 In 2020, U.S.
goods and services exports to the EU were more than double U.S. exports to China and imports
from the EU were 17% greater than those from China.129 Cross-border data flows between the
United States and EU are among the highest in the world. U.S.-EU trade of ICT services and
potentially ICT-enabled services was over $264 billion in 2020.130 The United States maintains a
large digital trade surplus over the EU (see Figure 4). Two of the top five e-commerce retailers in
Europe were U.S. firms in 2020.131
125 Office of Public Affairs, Four Chinese Nationals Working with the Ministry of State Security Charged with Global
Computer Intrusion Campaign Targeting Intellectual Property and Confidential Business Information, Including
Infectious Disease Research, Department of Justice, July 19, 2021, https://www.justice.gov/opa/pr/four-chinese-
nationals-working-ministry-state-security-charged-global-computer-intrusion.
126 For more information on encryption, see CRS Report R44187, Encryption and Evolving Technology: Implications
for U.S. Law Enforcement Investigations, by Kristin Finklea, and CRS Report R44407, Encryption: Selected Legal
Issues, by Richard M. Thompson II and Chris Jaikaran.
127 United States, Proposal on Regulatory Cooperation Cybersecurity of Software-Enabled and/or Network Connected
129 U.S. Bureau of Economic Analysis, Table 1.5. U.S. International Trade in Goods and Services by Area and Country,
Source: Mark Scott, “Digital Bridge,” Politico, April 1, 2021, based on U.S. Bureau of Economic Analysis data.
132 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of
natural persons with regard to the processing of personal data and on the free movement of such data, and repealing
Directive 95/46/EC (General Data Protection Regulation), https://eur-lex.europa.eu/legal-
content/EN/TXT/?uri=CELEX%3A32016R0679.
133 European Data Protection Supervisor, “The EDPS opens two investigations following the “Schrems II” Judgement,”
Protection Act, 2021 ch. 35 (to be codified at Va. Code Ann. §§ 59.1-571-59.1-581).
For more information on U.S.-EU data flows, see CRS In Focus IF11613, U.S.-EU Privacy
Shield, by Rachel F. Fefer and Kristin Archick.
135 European Commission, “Shaping Europe’s digital future,” February 2020, at https://ec.europa.eu/info/sites/info/
files/communication-shaping-europes-digital-future-feb2020_en_4.pdf, and https://ec.europa.eu/info/strategy/priorities-
2019-2024/europe-fit-digital-age/shaping-europe-digital-future_en. For more information, see https://ec.europa.eu/
digital-single-market/en/content/european-digital-strategy.
136 The Digital Markets Act (DMA), published December 15, 2020, by the European Commission, would establish
competition rules for certain online platforms. European Commission, Proposal for a REGULATION OF THE
EUROPEAN PARLIAMENT AND OF THE COUNCIL on contestable and fair markets in the digital sector (Digital
Markets Act), COM/2020/842 final, December 15, 2020, at https://eur-lex.europa.eu/legal-content/en/TXT/?qid=
1608116887159&uri=COM%3A2020%3A842%3AFIN. For more information, see European Commission, “The
Digital Markets Act: ensuring fair and open digital markets,” https://ec.europa.eu/info/strategy/priorities-2019-2024/
europe-fit-digital-age/digital-markets-act-ensuring-fair-and-open-digital-markets_en.
137 Regulation is commonly referred to as an ex-ante (“existing before the event”) government tool; competition rules
the rules could result in fines of up to 10% of a company’s total worldwide annual
revenue. In some cases, the commission could impose behavioral or structural
penalties (e.g., divestiture of certain businesses).
The draft “Digital Services Act (DSA)” seeks to set liability rules related to illegal
online content and products, transparency obligations, and other requirements for all
online intermediary services.138 The DSA includes rules for all online intermediary
services doing business in the EU, but the requirements vary by company size and
role in the digital marketplace, with four distinct tiers identified in the draft.
The proposed ePrivacy Regulation would ensure the privacy of electronic
communications by requiring traditional telecommunications providers, as well as
messaging services (e.g., WhatsApp and SnapChat), to obtain explicit user consent
for online tracking (use of cookies), and limit the amount of time that the tracking
data may be stored.139
The draft “Data Governance Act” aims to set the legal foundation for a single market
for data sharing across the EU, with a focus on public and industrial, non-personal
data, while also encouraging “data altruism” by EU individuals to share their
personal data for “the common good”; all data sharing by companies and individuals
would be voluntary. 140
The proposal on AI seeks to ensure “trustworthy AI” and a human-centric
approach.141 The draft framework uses a risk-based approach to establish four tiers of
risk depending on the function of the AI system, with requirements varying by tier.
Each proposed or draft regulation would take time to progress to enactment into EU law,
potentially months or years, because it would require the approval of each member state and the
European Parliament.142 Whether each regulation once finalized and enacted will supersede
national member state laws, and the amount of flexibility member states will have, remain to be
seen.143
138 The Digital Services Act (DSA), published December 15, 2020, by the European Commission, would set rules for
online intermediaries. European Commission, Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT
AND OF THE COUNCIL on a Single Market For Digital Services (Digital Services Act) and amending Directive
2000/31/EC, COM/2020/842 final, December 15, 2020, at https://eur-lex.europa.eu/legal-content/en/TXT/?qid=
1608116887159&uri=COM%3A2020%3A842%3AFIN. For more information, see European Commission, “The
Digital Services Act: ensuring a safe and accountable online environment,” https://ec.europa.eu/info/strategy/priorities-
2019-2024/europe-fit-digital-age/digital-services-act-ensuring-safe-and-accountable-online-environment_en.
139 For more information on the ePrivacy Regulation see, https://digital-strategy.ec.europa.eu/en/policies/eprivacy-
regulation.
140 The proposed Data Governance Act, published November 25, 2020, by the European Commission, would set rules
for data-sharing within the EU. European Commission, Proposal for a REGULATION OF THE EUROPEAN
PARLIAMENT AND OF THE COUNCIL on European data governance (Data Governance Act), COM/2020/767 final,
November 25, 2020, at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A52020PC0767.
141 The proposed Artificial Intelligence Act, published April 21, 2021, by the European Commission would set the legal
framework for AI. European Commission, Proposal for a Regulation laying down harmonised rules on artificial
intelligence (Artificial Intelligence Act), April 21, 2021, https://digital-strategy.ec.europa.eu/en/library/proposal-
regulation-laying-down-harmonised-rules-artificial-intelligence-artificial-intelligence.
142 For more information on the EU legislative process, see https://ec.europa.eu/info/law/law-making-process/adopting-
eu-law_en#:~:text=
Most%20EU%20laws%20are%20adopted%20using%20the%20ordinary,in%20order%20for%20it%20to%20become%
20EU%20law. Also see CRS In Focus IF11211, The European Parliament and U.S. Interests, by Kristin Archick.
143 For more information on the EU digital policies, see CRS Report R46732, EU Digital Policy and International
146 USTR, 2021 National Trade Estimate Report on Foreign Trade Barriers, March 2021.
147Laura Kayli, “Europe’s Controversial Copyright Reform Turns 1 Amid Ongoing Tensions,” POLITICO, April 15,
2020.
148 Sam Schechner, “Google Fined $593 Million in France Over Treatment of News Publishers,” July 13, 2021, The
organizations for using their stories, while the new law adopted by Spain allows news aggregators
to negotiate licensing fees directly with news organizations.150
150 Tom Bateman, “Google News Returns to Spain After the Country Adopts New EU Copyright Law,” EuroNews,
November 4, 2021.
151 The White House, U.S.-EU Summit Statement, Towards a Renewed Transatlantic Partnership, Press release,
153 Under the Obama Administration, a U.S. goal for T-TIP had been to develop “appropriate provisions to facilitate the
use of electronic commerce to support goods and services trade, including through commitments not to impose customs
duties on digital products or unjustifiably discriminate among products delivered electronically.” USTR, “U.S.
Objectives, U.S. Benefits in the Transatlantic Trade and Investment Partnership: A Detailed View,” fact sheet, March
2014.
China
China presents a number of significant opportunities and challenges for the United States in
digital trade. The digitization of certain parts of the Chinese economy, coupled with a large and
increasingly prosperous population, has led to a surge in the number of Chinese internet users and
made China a major source of global ecommerce. Since 2000, China’s total number of internet
users has grown from 21.5 million to an estimated 1 billion, according to official statistics
published by a central government department under the Cyberspace Administration of China
(CAC). This rapid growth in internet users is primarily seen by analysts as a result of a concerted
government focus on expanding mobile internet access across the country, particularly in rural
and remote areas.154 Chinese data on mobile app use also highlights the growth of several discrete
service and product areas across China’s economy. Approximately 99.7% of China’s internet
users access the internet via smartphone. As of February 2021, online games constituted
approximately 25% of all mobile phone apps on Chinese mobile app stores, while e-commerce
and consumer services apps represented 9.9% and 9% of mobile apps in China, respectively,
according to Chinese government data.155
China’s e-commerce market is currently the world’s largest in terms of both transactions and
potential consumers, surpassing those of the United States, UK, Japan, Germany, and France
combined.156 China is home to approximately 710 million e-commerce customers, according to
data compiled by the U.S. Department of Commerce, and China’s online retail transactions
reached $1.93 trillion in 2019 (approximately $33 billion of which were cross-border
transactions) and are projected to reach $4.09 trillion by 2023.157 Many market analysts contend
that the size of China’s e-commerce consumer base, combined with the rapid “digitization” of
daily goods and services transactions, will continue to drive long-term innovation in China’s
digital economy.158
U.S. firms may benefit from the expanding digital trade in China, but they also face numerous
challenges in the Chinese market, most notably several NTBs that limit the ability of foreign
firms to compete in China’s digital services markets. In its 2021 annual report on trade barriers,
USTR identified several significant NTBs that hamper U.S. firms operating in China’s digital
markets, including China’s emerging cybersecurity and data governance regime (discussed
below), investment restrictions in China’s technology and ICT sectors, and new encryption
requirements that mandate the use of indigenous encryption algorithms, among others.159 More
broadly, China also maintains investment restrictions on foreign investment in most internet and
telecommunications sectors, and the limited extent to which foreign firms are allowed to
154 CSIS China Power Team, “How Web-Connected is China?” Center for Strategic and International Studies¸ updated
May 25, 2021, https://chinapower.csis.org/web-connectedness/.
155 China Internet Network Information Center, The 47th Statistical Report on China’s Internet Development, February
2021, https://www.trade.gov/country-commercial-guides/china-ecommerce.
157 Ibid.
158 McKinsey & Company, “The Future of Digital Innovation in China: Megatrends Shaping One of the World’s
participate in these industries is often conditioned on various localization and joint venture
requirements.160 USTR’s findings also note that China has generally failed to notify new technical
regulations governing cybersecurity and data protection to the WTO Committee on Technical
Barriers to Trade, a process that China had previously agreed to follow.
According to an annual survey of U.S. firms operating in China conducted by the American
Chamber of Commerce in China (AmCham China), approximately one-third of U.S. firms
operating in technology and other research-intensive industries named data security and
increasing protectionism as among their top business challenges in China. Additionally, a quarter
of U.S. firms operating in China’s services sector pointed to internet access quality, censorship,
and data security as among the top challenges facing their operations in China.161 In general, one
in five respondents to the AmCham China survey noted that data localization requirements have
had an “extremely negative” impact on their competitiveness and operations in China. Other
concerns identified by firms surveyed include concerns regarding new data privacy regulations,
hardware and software procurement restrictions on information systems, and IP leakage and data
security concerns during third party reviews of products and software (Table I):
Foreign firms operating in China have often chosen to operate in Hong Kong or invest in
additional offices there in order to mitigate the effects of China’s internet restrictions and data
localization requirements, which have limited the connectivity of internet users with IP addresses
based in mainland China. Several U.S. social media and internet companies whose services are
restricted in mainland China—including Facebook, Twitter, Google, and Amazon Web Services,
among others—maintain offices in Hong Kong in order to offer services within the city and
conduct less restricted ancillary business, such as advertising, in mainland China.
Following the Chinese government’s crackdown on pro-democracy protests in Hong Kong in
2019 and 2020, however, several experts and members of the international business community in
Hong Kong have expressed concerns about the erosion of certain business freedoms long enjoyed
160 For more details on these investment restrictions, see CRS Report R46915, China’s Recent Trade Measures and
Countermeasures: Issues for Congress, by Karen M. Sutter, pp. 16-19.
161 American Chamber of Commerce in China, “2021 China Business Climate Survey Report,” March 2021,
https://www.amchamchina.org/climate-survey/2021-business-climate-survey/.
by multinational firms operating in Hong Kong, including a lack of cross-border data and internet
content controls.162 The Chinese government’s imposition of a new National Security Law in
Hong Kong has intensified these concerns.163 Several of U.S. technology firms, most notably
Facebook and Twitter, have announced that they are considering exiting Hong Kong in response
to certain moves by Hong Kong regulators to introduce new restrictions on internet activities that
could incite “illegal acts” as defined by the new National Security Law, which include many
forms of social organizing often conducted using social media services.164 In January 2021, Hong
Kong Broadband Network (HKBN), the territory’s primary internet service provider, announced
that it would block access to or remove domains that could incite “illegal acts,” which further
fueled concerns about an expansion of Beijing’s internet censorship policies into Hong Kong.165
162 American Chamber of Commerce in Hong Kong, “Should I Stay or Should I Go? A Temperature Testing Survey of
Expats in Hong Kong,” May 2021, https://www.amcham.org.hk/sites/default/files/content-
files/Survey/202105%20AmCham%20Survey%20-%20Should%20I%20Stay%20or%20Should%20I%20Go%20-
%20FINAL_1.pdf; Newley Purnell, “Facebook, Twitter, Google Threaten to Quit Hong Kong Over Proposed Data
Laws,” The Wall Street Journal, July 5, 2021, https://www.wsj.com/articles/facebook-twitter-google-warn-planned-
hong-kong-tech-law-could-drive-them-out-11625483036.
163 Kari Soo Lindberg, Natalie Lung and Pablo Robles, “How Hong Kong’s National Security Law is Changing
https://www.reuters.com/world/china/facebook-google-twitter-say-could-quit-hong-kong-over-proposed-data-laws-wsj-
2021-07-05/.
165 Jessie Pang, “Hong Kong censorship debate grows as internet firm says can block ‘illegal acts’,” Reuters, January
This report uses “Cyber Sovereignty,” which matches the term for the principle used in the Chinese version of the 2017
International Strategy for Cooperation on Cyberspace (网络空间的主权 wangluo kongjian zhuquan).
167 Ministry of Foreign Affairs of the People’s Republic of China, “International Strategy of Cooperation on
The document also asserts that “Countries should respect each other’s right to choose their own
path of cyber development, model of cyber regulation and internet public policies, and participate
in international cyberspace governance on an equal footing.”168 Some analysts contend that the
Chinese government’s definition of cyber sovereignty represents an assertion that governments
should have control over the internet and data flows generated by users within their borders.169
Chinese delegations to international organizations that set global internet standards, such as the
International Telecommunications Union (ITU) and Internet Corporation for Assigned Names and
Numbers (ICANN), have advanced proposals that align with the Chinese government’s view of
internet sovereignty.170 Cyber sovereignty is also a key element in China’s commercial expansion
into sectors of the global digital economy, such as cloud computing. Huawei, a major Chinese
provider of ICT infrastructure and cloud services globally, supplies artificial intelligence and
surveillance technology and services to governments in packages that are often designed to be
centrally controlled by government security services.171
In addition to its potential international implications, some see China’s invocation of
“sovereignty” in its new data security and cybersecurity laws as an attempt by the government to
control information that is deemed a threat to social stability.172 Some critics of China’s push for
global standards that conform to its principles of cyber sovereignty have characterized the effort
as promoting “digital authoritarianism.”173 Other critics of China’s cyber sovereignty principle
view it as an attempt by the government to limit market access by foreign internet, digital, and
high technology firms in China and to boost Chinese firms, reduce China’s dependence on
foreign technology, and exercise more comprehensive control over market entry in expanding IT
and digital services sectors.174
https://www.fmprc.gov.cn/mfa_eng/wjb_663304/zzjg_663340/jks_665232/kjlc_665236/qtwt_665250/t1442390.shtml.
168 Ibid.
169 Adam Segal, “China’s Vision for Cyber Sovereignty and the Global Governance of Cyberspace,” National Bureau
https://www.kas.de/documents/252038/7995358/China%E2%80%99s+Approach+to+Cyber+Sovereignty.pdf/2c6916a
6-164c-fb0c-4e29-f933f472ac3f?version=1.0&t=1606143361537.
171 Adam Segal, China’s Alternative Cyber Governance Regime, testimony before the U.S.-China Economic and
https://www.lowyinstitute.org/the-interpreter/cyber-sovereignty-cuts-both-ways.
173 U.S. Congress, Senate Committee on Foreign Relations, The New Big Brother: China and Digital Authoritarianism,
China’s leaders have pushed to define the scope of China’s digital economy by enacting new laws
governing various aspects of China’s internet infrastructure.
Following the enactment of an updated National Security Law in 2015 and new Cybersecurity
Law in 2018, China’s National People’s Congress in 2021 passed a new Data Security Law and
Personal Information Protection Law. The Data Security Law and Personal Information
Protection Law are both in effect as of November 1, 2021. These new laws governing cyberspace
and the generation and use of data contain several provisions that could create additional
regulatory barriers to digital trade with China and limit the ability of U.S. firms to provide
hardware, software, and services in China. Many of these laws are premised on a now-ubiquitous
principle across Chinese tech regulations that critical information infrastructure should be “secure
and controllable,” a term that has not been precisely defined by Chinese authorities but which has
been developed and applied in the market since at least 2007, including in China’s updated 2015
National Security Law.175 Other proposals of concern to U.S. firms appear to lay out policies that
would require foreign firms across a range of technology sectors to share proprietary information
as part of new licensing practices (See text box). Laws that have been enacted or passed in China
that present challenges to accessing China’s digital markets include:
Data Security Law of the People’s Republic of China regulates all “data
activities” conducted within China’s borders, and notably covers data activities
conducted outside of China that may “... harm the national security of the
People’s Republic of China, or the legitimate rights of Chinese citizens or
entities.”176 The law is the first to regulate “data transactions” in China, and
requires China’s State Council to establish data transaction management systems
and “... cultivate a data transaction market.”177
Some analysts contend that the new law could create an environment conducive to further
expansion of digital trade and e-commerce in China by providing clear regulations and standards
for businesses handling Chinese user data. Others argue that the law’s emphasis on state control
and review of data, coupled with its explicit extraterritoriality, could make it more difficult for
multinational firms handling Chinese user data in any capacity to conduct operations in China.178
For example, following LinkedIn’s decision to end its China operations in October 2021, the firm
cited concerns about China’s new data localization and security requirements as a significant
factor in its decision.179
175 For more on China’s localization requirements, see CRS Report R46915, China’s Recent Trade Measures and
Countermeasures: Issues for Congress, by Karen M. Sutter, pp. 22-28.
176 Passed by the National People’s Congress (or NPC, China’s primary legislative body) in June 2021 and effective
September 2021. The law’s definition of “data activities” includes data usage, storage, collection, processing provision,
disclosure, or transmission. For a summary of key provisions in the Data Security Law, see Hui Xu and Kieran
Donovan, “China’s New Data Security Law: What to Know,” Latham & Watkins, July 21, 2021,
https://www.lw.com/thoughtLeadership/china-new-data-security-law-what-to-know.
177 Article 19 of the Data Security Law of the People’s Republic of China, for translation of the full law see “Data
Security Law of the People’s Republic of China (Translation),” Stanford DigiChina, June 29, 2021,
https://digichina.stanford.edu/work/translation-data-security-law-of-the-peoples-republic-of-china/.
178 Camille Boullenois, “China’s Data Strategy: Creating a state-led market,” EU Institute for Security Studies, October
180 Passed by the NPC in August 2021 and effective November 2021. For a full translation of the law, see Rogier
Creemers and Graham Webster, “Translation: Personal Information Protection Law of the People’s Republic of China
– Effective Nov. 1, 2021,” Stanford DigiChina, August 20, 2021, https://digichina.stanford.edu/work/translation-
personal-information-protection-law-of-the-peoples-republic-of-china-effective-nov-1-2021/.
181 Alexa Lee et. al, “Seven Major Changes in China’s Finalized Personal Information Protection Law,” Stanford
commerce giant JD.com to share consumer credit data with regulators. For more, see Julie Zhu, “China to push its tech
giants to share consumer credit data – sources,” Reuters, January 11, 2021,
https://www.reuters.com/world/china/exclusive-china-push-its-tech-giants-share-consumer-credit-data-sources-2021-
01-11/.
183 Tracy Qu, “Chinese court orders wildlife park to delete facial recognition data as privacy concerns grow among
Chinese citizens,” South China Morning Post, November 23, 2020, https://www.scmp.com/tech/big-
tech/article/3110981/chinese-court-orders-wildlife-park-delete-facial-recognition-data.
184 Masha Borak, “China’s privacy law borrows a page from Europe’s GDPR but it goes further as Beijing shores up
data security,” South China Morning Post, August 26, 2021, https://www.scmp.com/tech/tech-
war/article/3146523/chinas-privacy-law-borrows-page-europes-gdpr-it-goes-further-beijing; Gibson Dunn, China
Passes the Personal Information Protection Law, to Take Effect on November 1,” September 10, 2021,
https://www.gibsondunn.com/china-passes-the-personal-information-protection-law-to-take-effect-on-november-1/.
create a framework for intra-governmental standards for government agencies managing data
generated by users in China, these appear to be primarily focused on outlining the roles of
particular ministries and departments in handling and processing data.185
Cybersecurity Law of the People’s Republic of China ascertains the principles of
cyberspace sovereignty;186 defines the security-related obligations of network product
and service providers; further enhances the rules for protection of personal
information; establishes a framework of security protection for “critical information
infrastructure”; and establishes regulations pertaining to cross-border transmissions
of important data by critical information infrastructure.187 Following the law’s entry
into effect, several experts and business advocacy groups argued that its lack of a
clear definition for what constitutes “critical information infrastructure” could lead to
additional compliance risks for firms that handle or generate data in China (see text
box).188 For example, CAC or the PRC government subjected Chinese ride-hailing
firm Didi Chuxing to a cybersecurity review following concerns expressed by CAC
and other regulatory agencies about its handling of Chinese user data in the wake of
an initial public offering (IPO) on the New York Stock Exchange, resulting in a
significant drop in Didi’s stock price immediately following its IPO and its
temporary removal from app stores in China. 189
National Security Law of the People’s Republic of China emphasizes the state’s
role in driving innovation and reviewing “foreign commercial investment, special
items and technologies, internet information technology products and services,
projects involving national security matters, as well as other major matters and
activities, that impact or might impact national security.”190 The law has served as a
cornerstone of the Chinese government’s emerging data governance regime – one
article establishes the goal of “elevating the capability to protect network and
information security,” as well as “achieving the security and controllability of core
network and information techniques, key infrastructure, information systems in
important fields and data,” among other measures.191
185 Rogier Creemers, “China’s Emerging Data Protection Framework,” November 16, 2021, available at SSRN:
https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3964684.
186 Passed by the NPC on November 7, 2016, and effective June 1, 2017. Article 1 states: “This law is formulated so as
to ensure network security, to safeguard cyberspace sovereignty, national security and the societal public interest, to
protect the lawful rights and interests of citizens, legal persons and other organizations, and to promote the healthy
development of economic and social informatization.”
187 Deloitte, “A new era for Cybersecurity in China,” November 2017, available at https://www2.deloitte.com/cn/en/
pages/risk/articles/new-era-cybersecurity-law.html.
188 Daniel Rechtschaffen, “Why China’s Data Regulations are a Compliance Nightmare for Companies,” The Diplomat,
Relations, National Security Law of the People’s Republic of China, July 1, 2015, http://www.cfr.org/homeland-
security/national-security-law-peoples-republic-china/p36775.
191 Emphasis added by CRS. Tim Stratford, Eric Carlson, Grace Chen, and Yan Luo, “China Enacts New National
China’s Cybersecurity Law, Joint Ventures, and Localization in China: The Case of
Apple’s Guiyang Data Center
Over the decade following the iPhone’s launch in China in 2009, China quickly shifted from primarily a supplier of
intermediate inputs for iPhones and other Apple products to a significant consumer of iPhones and other Apple
products. While Apple does not publish detailed sales data by country, Greater China is the company’s third-
largest source of revenue ($68.4 billion), according to Apple’s 202110-K filings. In 2017, to comply with provisions
in China’s Cybersecurity Law that require local storage of data generated by Chinese users, Apple announced that
it would build a new data center in an area of Guizhou where local authorities offered state support for the
construction of data centers operated by domestic technology champions such as Huawei and Tencent, as well as
joint ventures with multinational firms including Qualcomm and SAP. In 2018, Apple’s joint venture partner in the
Guiyang data center, Guizhou-Cloud Big Data Industry Co., Ltd. (GCBD), formally took over as the operator of all
iCloud services in mainland China, with Apple listed as a “third party” in the iCloud terms and conditions
displayed on devices in China.
In May 2021, before Apple’s Guizhou data center formally began operations, a New York Times investigation
published details of Apple’s cybersecurity and data handling arrangements finding that, in addition to being the
primary operator of the data center’s on-site hardware, GCBD also had access to all data stored on iCloud
services in China “under applicable law.” Apple had created new encryption keys to be stored on-site after the
Chinese government reportedly would not allow Apple to store the encryption keys in the United States as the
company has historically done. Although Apple has stated that it maintains control over the encryption keys,
several experts have expressed concerns that keeping the encryption keys in China allows Chinese authorities to
use the domestic legal system to compel Apple to hand over iCloud user data in cases, rather than use the U.S.
court system.
Several human rights experts have pointed to Apple’s compliance with China’s data governance regime as
potentially empowering the Chinese government to exert further control over the global flow of data and
information. For example, Apple cited its need to comply with Chinese law following its decision to remove all
apps providing VPN services from its App Store in China in 2017 and again, in 2019, when it removed several apps
from its Hong Kong App Store that used by protestors in Hong Kong. In response to concerns regarding Apple’s
business in China and its potential human rights implications, Apple CEO Tim Cook stated that Apple has a
“responsibility” to do business in China and that Apple has had to “...acknowledge that there are different laws in
other markets.”
Sources: Apple, Inc, “Form 10-K Annual Report Pursuant to Section 13 OR 15(d) of the Securities Exchange Act
of 1934 For the fiscal year ended September 25, 2021,”; Sofia Baruzzi, “Guizhou: Investing in China’s Big Data
Valley and its Sustainable Development,” China Briefing¸ February 26, 2021; Li Tao, “Qualcomm said to end chip
partnership with local government in China’s rural Guizhou province,” South China Morning Post, April 19, 2019;
Dou Shicong, “Guizhou-Cloud Big Data Takes Over iCloud in China’s Mainland,” Yicai Global, February 28, 2018;
Apple, “iCloud operated by GCBD Terms and Conditions,” available at https://www.apple.com/legal/internet-
services/icloud/en/gcbd-terms.html; Jack Nicas, Raymond Zhong and Daisuke Wakabayashi, “Censorship,
Surveillance and Profits: A Hard Bargain for Apple in China,” New York Times, May 17, 2021; Stephen Nellis and
Cate Cadell, “Apple moves to store iCloud keys in China, raising human rights fears,” Reuters, February 24, 2018;
Associated Press, “Tim Cook defends Apple’s pulling of Hong Kong protest App,” Los Angeles Times, October
10, 2019; Cate Cadell, “Apple says it is removing VPN services from China App Store,” Reuters, July 29, 2017;
Associated Press, “Tim Cook defends Apple’s pulling of Hong Kong protest App,” Los Angeles Times, October
10, 2019; Cate Cadell, “Apple says it is removing VPN services from China App Store,” Reuters, July 29, 2017; and
Katie Canales, “Tim Cook says Apple has a ‘responsibility’ to do business everywhere, even in China despite
human rights issues,” Business Insider, November 10, 2021.
In addition to these new laws, which provide an overarching legal framework for further
regulation of China’s digital economy, the Chinese government has also initiated an aggressive
push to formulate national cybersecurity and encryption standards that could pose significant
challenges to foreign firms seeking to operate in China. Several business groups in China have
https://www.cov.com/~/media/files/corporate/publications/2015/06/china_passes_new_national_security_law.pdf; full
translation of the law available at https://www.chinalawtranslate.com/en/2015nsl/.
expressed concerns that China’s process for setting national standards does not sufficiently
include input from foreign companies, and that many Chinese national standards do not comply
with China’s commitments under the WTO Agreement on Technical Barriers to Trade.192 Some
analysts note that the Chinese government has sought to avoid issues in the WTO by
downgrading “required” standards to “recommended” standards, but contend that meeting many
“recommended” standards is essentially required for multinational firms to compete in China’s
market.193
U.S. Efforts to Address Digital Trade Barriers and IP Theft Issues in China
China’s barriers to digital trade not only limit access to China’s market for multinational digital
services companies, but also serve as a point of leverage to coerce U.S. firms to transfer
intellectual property, sensitive technology, and trade secrets to China in order to access its market.
As noted earlier, China is considered by many experts to be the largest source of global theft of IP
via illicit means and a major source of cyber theft of U.S. trade secrets, including by government
entities.194 Persistent concerns over China’s overall policies on IP, technology, and innovation
policies led the Trump Administration, in August 2017, to launch a Section 301 investigation of
China’s trade practices, particularly those considered to facilitate IP theft and technology
transfer.195 On March 22, 2018, President Trump signed a Memorandum on Actions by the United
States Related to the Section 301 Investigation that identified four broad IPR-related policies that
justified U.S. action under Section 301.196 At the time, USTR estimated such policies cost the
U.S. economy at least $50 billion annually.
The Section 301 findings resulted in a series of increased U.S. tariffs being applied to imports
from China and the Chinese government taking similar action on certain U.S. imports in response
as retaliatory action. These actions were paused in January 2020 when the United States and
China signed a “Phase One” Trade Agreement. 197 Many analysts noted that the Phase One
language on intellectual property lacks concrete steps and commitments from China that address
its use of regulatory and licensing barriers to limit market access and facilitate tech transfer,
which was acknowledged by both the United States and China as something to be resolved in
“Phase Two” discussions.198 Such discussions have not yet been initiated, though USTR
192 Jack Kamensky, “Standards Setting in China: Challenges and Best Practices,” U.S. – China Business Council,
February 2020,
https://www.uschina.org/sites/default/files/standards_setting_in_china_challenges_and_best_practices.pdf; Office of
the United States Trade Representative, 2021 National Trade Estimate Report on Foreign Trade Barriers, March 2021
(Washington, DC), p. 105.
193 Samm Sacks and Manyi Kathy Li, “How Chinese Cybersecurity Standards Impact Doing Business,” Center for
states-related-section-301-investigation/; For more on executive actions related to the 2018 Section 301 investigation,
see CRS In Focus IF11346, Section 301 of the Trade Act of 1974, by Andres B. Schwarzenberg.
197 For a full breakdown of U.S. – China tariff actions, see CRS Report R45949, U.S.-China Tariff Actions by the
Katherine Tai announced in an October 2021 speech that the Biden Administration will seek to
raise “broader policy concerns with Beijing” as it works to enforce the terms of the Phase One
deal.199
Some experts have suggested the Biden Administration pursue a digital trade deal with U.S. trade
partners in the region, including South Korea, Japan, and other countries in Southeast Asia and
Oceania, with provisions potentially based on those in the newest U.S. digital trade agreement
with Japan (see “U.S.-Japan Digital Trade Agreement”).200 Some observers contend that a broad,
inclusive digital trade agreement could provide the United States with an opportunity to establish
robust multilateral standards governing cybersecurity standards, cross-border data transfers, and
intellectual property, areas where Beijing is increasingly pushing to promote its own standards.201
China’s moves to join regional digital agreements, however, highlights areas where the country’s
standards and practices, which align closely with its principle of cyber sovereignty, clash with
broader consensus among developed economies on the importance of the free flow of data and
other policies related to digital trade.202
https://www.uschina.org/sites/default/files/us_industry_priorities_for_us-china_commercial_relations_0.pdf; Heather
Timmons and Andrea Shalal, “No ‘phase two’ U.S. – China deal on the horizon, officials say,” Reuters, November 24,
2019, https://www.reuters.com/article/us-usa-trade-china-phasetwo/no-phase-two-u-s-china-deal-on-the-horizon-
officials-say-idUSKBN1XZ00H.
199 U.S. Trade Representative, Remarks As Prepared for Delivery of Ambassador Katherine Tai Outlining the Biden-
Harris Administration’s “New Approach to the U.S.-China Trade Relationship”, October 4, 2021.
200 Peter Martin, Eric Martin, and Saleha Mohsin, “Biden Team Weighs Digital Trade Deal to Counter China in Asia,”
2021, https://asia.nikkei.com/Economy/Trade/China-applies-to-join-digital-trade-pact-with-Singapore-and-NZ.
WTO Provisions
While no comprehensive agreement on digital trade exists in the WTO, certain WTO agreements
and ongoing plurilateral negotiations cover some aspects of digital trade.
203 For more information, see https://www.wto.org/english/tratop_e/serv_e/serv_e.htm, and CRS Report R43291, U.S.
Trade in Services: Trends and Policy Issues, by Rachel F. Fefer.
204 Alessandro Antimiani and Lucian Cernat, “Liberalizing Global Trade in Mode 5 Services: How Much is it Worth,”
206 Erik van der Marel, “Lessons from the pandemic for trade cooperation in digital services,” European Centre for
transmissions. India and South Africa, in particular, are seeking to amend the moratorium to
narrow its scope, arguing that they are giving up a potential revenue stream. The countries cite a
United Nations (UN) report advocating for an end to the moratorium because, as increasing
volumes of electronic transmissions replace trade in physical goods, governments are losing out
in the form of foregone tariffs, as much as $3.4 billion for developing countries.209 In contrast, an
OECD study found that foregone revenue of the moratorium is likely to be relatively small and
that its lapse would come at the expense of wider gains in the economy including export
competitiveness and productivity.210 Another study specifically questions the U.N. research
methodology and calculates that a country would lose considerably more in GDP than they would
gain in tariff revenue.211
209 Rashmi Banga, “Growing Trade in Electronic Transmissions: Implications for the SouthUNCTAD Research Paper
No. 29,” UNCTAD/SER.RP/2019/1.
210 Andrenelli, A. and J. López González (2019), "Electronic transmissions and international trade - shedding new light
on the moratorium debate", OECD Trade Policy Papers, No. 233, OECD Publishing, Paris,
https://doi.org/10.1787/57b50a4b-en.
211 Hosuk Lee-Makiyama, “The Economic Losses from Ending the WTO Moratorium on Electronic Transmissions,”
Regulatory Responses to Emerging Issues,” WTO, Staff Working Paper, February 3, 2021. For background, see CRS
Report RL34292, Intellectual Property Rights and International Trade, by Shayerah I. Akhtar, Ian F. Fergusson, and
Liana Wong.
TRIPS incorporates the main substantive provisions of WIPO conventions by reference, making
them obligations under TRIPS. Most WTO members were required to fully implement TRIPS by
1996, with transition periods for developing country members (until 2000) and least-developed-
country (LDC) members (until July 1, 2034).
TRIPS aims to balance the rights and obligations between protecting private rights holders’
interests and securing broader public benefits. Among its provisions, the TRIPS section on
copyright and related rights includes specific provisions on computer programs and compilations
of data. It requires protections for computer programs—whether in source or object code—as
literary works under the WIPO Berne Convention for the Protection of Literary and Artistic
Works (Berne Convention). TRIPS also clarifies that databases and other compilations of data or
other material, whether in machine-readable form or not, are eligible for copyright protection
even when the databases include data not under copyright protection.213 TRIPS provisions have
set a foundation for IPR provisions in subsequent U.S. trade negotiations and agreements, many
of which are “TRIPS-plus.”
Like the GATS, TRIPS predates the era of ubiquitous internet access and commercially
significant e-commerce. TRIPS includes a provision for WTO members to “undertake reviews in
the light of any relevant new developments which might warrant modification or amendment” of
the agreement. The TRIPS Council previously engaged in discussions on the agreement’s
relationship to electronic commerce as part of the WTO Work Programme on Electronic
Commerce, focusing on copyright and related rights, trademarks, and new technologies.
Performances and Phonograms Treaty (1996), Report to accompany treaty document 105-17, 105th Cong., 2nd sess.,
October 14, 1998, S.Exec. Rept. 105-25.
215 USTR, 2021 Special 301 Report, April 2021, p. 11.
216 WIPO, “The Advantages of Adherence to the WIPO Copyright Treaty (WCT) and the WIPO Performances and
As of November 2021, the WCT had 110 contracting parties, and WPPT had 109 contracting
parties. The United States implemented the WIPO Internet Treaties through the Digital
Millennium Copyright Act of 1998 (DMCA) (P.L. 105-304), which included new standards for
protecting and enforcing copyrights in the digital environment, and certain “safe harbors” from
copyright infringement liability for ISPs.217 India was one of the latest countries to join the
treaties, entering them into force on December 25, 2018. The United States continues to call on
trading partners to fully implement the WIPO Internet Treaties.
Certain U.S. FTAs, including the U.S.-Mexico-Canada Agreement (USMCA, see below), as well
as other countries’ trade agreements, make reference to WIPO Internet Treaties, such as by
reaffirming or requiring compliance with them. IP and digital trade present a number of potential
issues regarding WIPO. Some stakeholders and analysts, for instance, have questioned whether
the TRIPS Agreement should incorporate the WIPO Internet Treaties, as it did with certain other
WIPO treaties.218 Additional issues which WIPO is exploring include artificial intelligence and
whether existing IP frameworks should be modified for machine-created inventions and works.
Areas of inquiry include potential protection for the actual machine-created work, AI algorithms
and software, and the underlying training data and data inputs.219
217 For more information on this statute, see CRS Report R43436, Safe Harbor for Online Service Providers Under
Section 512(c) of the Digital Millennium Copyright Act, by Brian T. Yeh.
218 TRIPS incorporates by reference all of the substantive obligations of the Paris Convention for the Protection of
Industrial Property (adopted in 1883 and applying to industrial property “in the widest sense,” including patents,
trademarks, industrial designs, and geographical indications) and the Berne Convention for the Protection of Literary
and Artistic Works (adopted in 1886 and applying to copyrights and related rights), save for the Berne Convention’s
provisions on moral rights. TRIPS also uses provisions of some other IPR-related international agreements. See WIPO,
“WIPO-Administered Treaties,” available at: https://www.wipo.int/treaties/en/; and WTO, “What is the Relationship
Between the TRIPS Agreement and the Pre-existing International Conventions that it Refers to?,” available at:
https://www.wto.org/english/tratop_e/trips_e/tripfq_e.htm#TripsAndConventions.
219 WIPO, “WIPO Conversation on Intellectual Property (IP) and Artificial Intelligence (AI), Second Session,” May 21,
2020.
220 Subhayan Chakraborty, “India refuses to join e-commerce talks at WTO, says rules to hurt country,” The Business
agreement include market access, data flows, nondiscriminatory treatment of digital products,
protection of IP and digital security measures, and intermediary liability, among others.222
The co-conveners aim to have ten areas of “clean text” before the Ministerial Conference in
November 2021, which has now been postponed until next year at a date to be determined due to
the Covid-19 pandemic. As of September, the parties had finalized text on unsolicited messages
(spam), electronic signatures and authentication, e-contracts, open government data and, online
consumer protection.223 Other areas remain contentious. For example, the United States and the
EU have similar positions on many issues. The EU’s strict rules on data privacy impose more
constraints on cross-border data flows compared to U.S. laws, making it unclear if the two sides
will be able to reconcile their different regulatory approaches to create common rules.
Additionally, with regard to data flows and data storage, China has proposed the negotiations be
limited to exploratory discussions rather than establishing obligations and has generally supported
non-binding standards.224
The outlook may be challenging given the different approaches and policies, especially among
the United States, the EU, and China. Some analysts believe that the plurilateral WTO negotiators
will have to decide between scope and depth to reach a final agreement. A narrow agreement with
limited scope and provisions would likely retain the greatest number of negotiating participants,
including China, but could have less impact on eliminating barriers to and establishing non-
discriminatory rules and disciplines in digital trade if it does not address contentious issues such
as data flows or emerging technologies. On the other hand, a higher-standard agreement with
deeper and potentially more impactful commitments, whether on privacy or online content
moderation, may deter participants who are not willing or able to accept the obligations. There is
no agreement on whether the final obligations will be subject to dispute settlement, which will
affect the potential enforceability of the scope and depth of commitments agreed upon among
participants. Lesser-developed countries’ support may be linked to capacity building and
technical assistance, in addition to other flexibilities.
222 The United States, “Joint Statement on Electronic Commerce Initiative,” WTO, April 12, 2018.
223 WTO, “E-commerce talks: two “foundational” articles cleaned; development issues discussed,” press release,
September 13, 2021.
224 WTO Joint Statement on Electronic Commerce, INF/ECOM/19, April 23, 2019.
225 Andrew D. Mitchell and Neha Mishra, Digital trade integration in preferential trade agreements, ARTNeT, AWP
an e-commerce chapter in its FTAs since it signed an agreement with Singapore in 2003.226 The e-
commerce chapter of U.S. FTAs, which have evolved over time, usually begins by recognizing e-
commerce as an economic driver and the importance of removing trade barriers to e-commerce.227
Most chapters contain provisions on nondiscrimination of trade in digital products, prohibition of
customs duties, transparency, and cooperation mechanisms on topics such as SMEs, consumer
protection, cross-border information flows, and promoting dialogues to develop e-commerce. All
FTAs allow certain exceptions to ensure that each party is able to protect regulatory flexibility to
achieve legitimate public policy objectives.
226 https://ustr.gov/sites/default/files/uploads/agreements/fta/singapore/asset_upload_file708_4036.pdf.
227 This statement was used in U.S. free trade agreements with Australia, Bahrain, Colombia, Central America and the
Dominican Republic, Morocco, Oman, Panama, Peru, and South Korea. Chile used a slightly different text.
228 For more on USMCA, see CRS Report R44981, The United States-Mexico-Canada Agreement (USMCA), by M.
Partnership (TPP), which became the Comprehensive and Progressive Agreement for Trans-Pacific Partnership
(CPTPP/TPP-11) following the U.S. withdrawal from TPP in 2017. While the CPTPP retains the commitments
negotiated under the TPP, the CPTPP also contains certain country-specific exemptions through side letters to the
agreement, some of which affect digital trade commitments. USMCA builds on TPP commitments.
Liability for interactive computer services. Limits imposing civil liability with respect to third-party
content for internet platforms that depend on interaction with users, with some exclusions such as for
intellectual property rights infringement.
Cybersecurity. Commitments promote collaboration and use of risk-based strategies and consensus-
based standards over prescriptive regulation in dealing with cybersecurity risks and events.
Cryptography. Commitments prohibit requiring the transfer or access to proprietary information,
including a particular technology or production process, by manufacturers or suppliers of information
and communication technology (ICT) goods that use cryptography, as a condition for market access,
with some exceptions, such as for networks and devices owned, controlled, or used by government.
Dispute settlement. Commitments may be enforced through the through consultation and/or
additional formal dispute settlement procedures.
Sources: Drawn from the relevant sections of the USMCA text, including the Digital Trade chapter available at:
USMCA, Chapter 19, “Digital Trade,” at https://ustr.gov/sites/default/files/files/agreements/FTA/USMCA/Text/19-
Digital-Trade.pdf and sectoral annexes at
https://ustr.gov/sites/default/files/files/agreements/FTA/USMCA/Text/12_Sectoral_Annexes.pdf.
The digital trade chapter garnered overall support from U.S. stakeholders.230 However, one area
of controversy that emerged is the chapter’s prohibition of liability of internet intermediaries,
which reflects current U.S. law in Section 230 of the Communications Decency Act of 1996.231
Some lawmakers have expressed concerns about including the Section 230 liability shield in trade
agreements, and some Members seek to change the scope of, or otherwise make amendments, to
the immunity protection in U.S. law.232 Lawmakers also have raised similar concerns regarding
the digital agreement with Japan (see below).
230 For example, see Coalition of Services Industries (CSI) statement on Senate Passage of the USMCA Implementing
Bill, January 16, 2020; Anupam Chander, “The Coming North American Digital Trade Zone,” Council on Foreign
Relations, October 9, 2018; and Michael Beckerman, “Passing USMCA will help US companies address global threats
to digital trade,” The Hill, January 10, 2020.
231 For more information on Section 230 of the Communications Decency Act, see CRS Report R46751, Section 230:
December 5, 2019.
233 For more detail, see CRS Report R46140, “Stage One” U.S.-Japan Trade Agreements, coordinated by Brock R.
offices/press-office/fact-sheets/2019/october/fact-sheet-us-japan-digital-trade-agreement.
235 The Group of Twenty (G-20) is a forum for advancing international cooperation and coordination among 20 major
advanced and emerging-market economies. The G-20 includes Argentina, Australia, Brazil, Canada, China, France,
Germany, India, Indonesia, Italy, Japan, Mexico, Russia, Saudi Arabia, South Africa, South Korea, Turkey, United
Kingdom, and the United States, as well as the European Union (EU). See CRS Report R40977, International
Economic Policy Coordination at the G-7 and the G-20, by Rebecca M. Nelson.
236 UK Department for International Trade, “G7 Trade Ministers' Digital Trade Principles,” October 22, 2021.
237 For more information, please see UK Department for Digital, Culture, Media & Sport, “G7 Digital and Technology
the President for Technology Policy OECD Forum and Ministerial Council Meeting, May 21, 2019. For more
information, see https://www.oecd.org/going-digital/ai/principles/.
239 For more information, see OECD Tax Talks, https://www.oecd.org/tax/beps/tax-talks-webcasts.htm.
digital economies and industry.240 In a 2021 trade meeting, APEC ministers noted the importance
of digitalization for economic growth and called for accelerated implementation of related APEC
work programs and digitalization of trade facilitation processes to improve border processes and
enhance supply chains.241 Due to its voluntary nature, APEC has served as an incubator for
potential future plurilateral agreements (see text box).
Regulatory cooperation. Ongoing regulatory cooperation efforts are another important tool for
addressing differences between parties, better aligning regulatory requirements, and reducing
inconsistencies and redundancies that can hamper or discriminate against the free flow of data,
goods, and services. These forums provide an opportunity for U.S. agencies to work directly with
overseas counterparts and focus on specific aspects of digital trade such as online privacy,
consumer protection, and rules for online contract formation and enforcement. The EU-U.S.
Privacy Shield is one example of regulatory authorities working together to address such issues.
240 Asia Pacific Economic Cooperation (APEC) is a regional economic forum established in 1989 with 21 Asian Pacific
economies as members. See http://www.apec.org/About-Us/About-APEC.aspx.
241 APEC, APEC Ministers Responsible for Trade Meeting Joint Statement 2021, Wellington, New Zealand, June 4,
2021, https://www.apec.org/Meeting-Papers/Sectoral-Ministerial-Meetings/Trade/2021_MRT.
Digital trade raises numerous issues of potential oversight and legislative interest to Congress,
including:
Understanding the impact of digital trade on the U.S. economy and the effects of
localization and other digital trade barriers on U.S. trade and investment, firms and
their workers, and competition.
Examining how to best balance market openness and cross-border data flows with
other policy goals, such as the right to privacy and the government’s need to access
or limit access to certain data to protect safety and national security.
Considering if the United States would benefit from an overarching digital privacy
policy and what possible lessons to draw from other countries’ experiences, and how
to best balance this with U.S. trade negotiating objectives. Part of this examination
could include a comparison of the EU’s and China’s policies on personal data and the
extent to which each may set de facto global standards if other countries copy them in
part or in whole. Congress may also consider the potential opportunity for the United
States to enhance its role in shaping global data protection standards, especially if it
were to adopt more overarching policies.
Reviewing the U.S. role in standard-setting bodies and how best to ensure pro-active
leadership to shape international standards, including to respond to standard-setting
practices of other economies that may have global reach or may have aspects that are
unduly protectionist and discriminatory. The standard-setting practices of major
economies such as China and the EU may be of particular interest.
Examining evolving U.S. trade policy efforts and how best to achieve commercially
meaningful outcomes, whether through ongoing plurilateral negotiations at the WTO
or implementation of the OECD digital tax agreement, each of which may set new
binding and non-binding rules and disciplines, or if new approaches are needed to
advance U.S. commercial interests.
Conducting oversight to provide input into ongoing digital discussions with the EU,
including: negotiations to revise the EU-U.S. Privacy Shield Framework, working
groups set up under the new Trade and Technology Council (TTC), and the EU-U.S.
Joint Technology Competition Policy Dialogue. Efforts could include a joint
examination of key differences between the GDPR and China’s new laws and
regulations governing cross-border data flows.
Examining how to work with leading allies, including the EU and Japan, to jointly
respond to the challenges posed by China’s digital authoritarianism approach and
other non-market economy policies, especially with respect to forced technology
standards, theft of U.S. IPR, and market access barriers, and whether new legislative
authorities are needed to do so more effectively. For example, additional
considerations might include placing limits on U.S. firms’ involvement in
constructing data infrastructure in China that contributes to China’s surveillance and
control of cross-border data flows, or the introduction of disclosure requirements for
firms that share certain categories of data with Chinese authorities.
Considering whether and how to update the digital trade-related negotiating
objectives in potential new TPA legislation, as well as examining the standalone U.S.-
Japan Digital Trade Agreement and USMCA digital trade provisions and whether
they should serve as a model to address digital trade in broader FTAs. Part of this
examination could include which enforcement mechanisms may be best suited for
obligations on digital trade in potential future FTAs.
Conducting oversight into whether the United States should pursue a digital trade
agreement with Indo-Pacific partners to shape global standards and counter China’s
growing interest in shaping norms and standards governing digital trade or whether
the United States should consider joining, and potentially revising, existing regional
agreements. This oversight may entail a closer examination of the key differences
and costs and benefits of cooperative approaches, as compared to enforceable
commitments.
Author Information
Shayerah I. Akhtar
Specialist in International Trade and Finance
Acknowledgments
Special acknowledgement to Amber Wilhelm, Edward Gracia, Jennifer Roscoe, and Paulo Ordoveza for
creation of the graphics.
Disclaimer
This document was prepared by the Congressional Research Service (CRS). CRS serves as nonpartisan
shared staff to congressional committees and Members of Congress. It operates solely at the behest of and
under the direction of Congress. Information in a CRS Report should not be relied upon for purposes other
than public understanding of information that has been provided by CRS to Members of Congress in
connection with CRS’s institutional role. CRS Reports, as a work of the United States Government, are not
subject to copyright protection in the United States. Any CRS Report may be reproduced and distributed in
its entirety without permission from CRS. However, as a CRS Report may include copyrighted images or
material from a third party, you may need to obtain the permission of the copyright holder if you wish to
copy or otherwise use copyrighted material.