1. Home
  2. |Experience
  3. |Privacy and Cybersecurity
  4. |Cross-Border Data Flows

Cross-Border Data Flows

Overview

Given the presence of cross-border transfer restrictions in the majority of the personal data laws globally, along with the increasing emergence of laws restricting exports of certain categories of data, companies operating internationally must remain vigilant to stay on top of this changing landscape. Crowell & Moring provides this resource on legal issues encountered by international businesses in connection with cross-border data flows, featuring webinars, blog posts, legal alerts, and podcasts.

Our team of attorneys provides practical advice on cross-border data flow issues such as:

  • EU standard contractual clauses
  • Company group data transfer agreements
  • Binding corporate rules
  • Data export controls applicable to government contractors
  • Data transfers to cross-border vendors
  • Assessment of local laws in the U.S., Asia-Pacific, and the Middle East for purposes of transfers of personal data from the European Economic Area
  • Data transfers and data localization in the Asia-Pacific region
  • Data transfers from the United Kingdom
  • Supplementary measures
  • Cross-border information security requirements
  • Privacy Shield-related questions
  • Data assessments for compliance risk identification
  • Data mapping
  • Addressing cross-border transfers in online and mobile privacy notices
  • U.S. Cloud Act

Contacts

See All Professionals

Insights

Client Alert | 6 min read | 09.11.26

It’s LIVE: The Cyber Resilience Act Reporting Is Mandatory as of Today - 11 September 2026

The wait is over. As of today, manufacturers of connected products (both hardware and software) must comply with the Cyber Resilience Act’s (“CRA”) vulnerability and incident reporting obligations. The CRA’s Single Reporting Platform (“SRP”), operated by the European Union Agency for Cybersecurity (“ENISA”), is now the EU-wide gateway through which those notifications must flow....

View All Insights

Insights

Client Alert | 6 min read | 09.11.26

It’s LIVE: The Cyber Resilience Act Reporting Is Mandatory as of Today - 11 September 2026

Client Alert | 13 min read | 06.12.26

EU Cyber Resilience Act Countdown: 11 September 2026 Incident/Vulnerability Reporting Deadline Less Than 100 Days Away

Firm News | 1 min read | 06.11.26

Crowell & Moring Partner Emma Wright Appointed to UK Government's Digital ID Advisory Group

Firm News | 7 min read | 06.04.26

Crowell & Moring Secures Top Rankings in Chambers USA 2026

View All Insights

Professionals

View All Professionals

Insights

Client Alert | 6 min read | 09.11.26

It’s LIVE: The Cyber Resilience Act Reporting Is Mandatory as of Today - 11 September 2026

The wait is over. As of today, manufacturers of connected products (both hardware and software) must comply with the Cyber Resilience Act’s (“CRA”) vulnerability and incident reporting obligations. The CRA’s Single Reporting Platform (“SRP”), operated by the European Union Agency for Cybersecurity (“ENISA”), is now the EU-wide gateway through which those notifications must flow....

View All Insights