MIDTERM | M5

Question 1

involve the transmission of personal or sensitive data from one country to another.

Answer 1

CROSS-BORDER DATA TRANSFERS

Question 2

Sanctions and Penalties for Non-compliance

Answer 2

GDPR Penalties: Fines of up to 4% of a company’s global annual revenue or €20 million, whichever is higher.
US Sanctions: Penalties from the US Office of Foreign Assets Control (OFAC) for transferring data to restricted countries. China’s PIPL Penalties: Fines of up to RMB 50 million (~$7.8 million) or 5% of annual turnover for severe violations.
Brazil’s LGPD Penalties: Fines up to 2% of revenue, limited to 50 million
reais (~$10 million) per violation.

Question 3

three global regulations that govern cross-border data transfers

Answer 3

1. GDPR (General Data Protection Regulation)
2. PIPL (Personal Information Protection Law)
3. LGPD (General Data Protection Law)

Question 4

What are the key risks and challenges associated with cross-border data transfers?

Answer 4

• Data sovereignty
• Cybersecurity threats