Abstract:Abstract In the unfolding digital era, personal data has increasingly been conceptualized in a hybrid way, primarily drawing on notions of economics, privacy, and national security. Such a sui generis nature makes personal data something of its own category, opening the door to different conceptualizations by different actors. This article identifies three primary conceptualizations of personal data adopted by three major powers (the US, the EU, and China) with respect to cross-border data transfers—namely, a factor of production, an embodiment of fundamental rights, and an element of national security. Highlighting different attributes of personal data, these conceptualizations differ in what they understand personal data to be, how they address the relationship between individuals, their data, and the governments, as well as what they frame as the most important normative goals for regulatory interventions. Moreover, these conceptualizations are embedded in different philosophies and ideologies, ranging from neo-liberalism to human rights and to sovereignty. These irreducible normative elements render the contestations among such conceptualizations unable to be easily resolved. Further, divergent conceptualizations of personal data mandate and justify different legal paradigms to institutionalize their basic logics and policy choices. Built on different primary conceptualizations of personal data, three major legal paradigms compete to regulate cross-border personal data flows: a trade paradigm, a privacy paradigm, and a security paradigm. Aligned with its major conceptual framing of personal data, a great power often embraces a particular paradigm as its dominant approach to regulate cross-border transfers of personal data. These paradigms strive to provide legal and regulatory solutions (including legal prescriptions, regulatory institutions, and enforcement tools) to address the salient problems identified and framed by different conceptualizations of personal data.

Regulatory Approaches of Cross-border Data Flow in the Big Data Era: China’s Choice

Cross-border Data Flow Governance: The Integration of International Experience and China's Modernization Path

Long-Arm Jurisdiction in Cross-Border Data Flows: EU-US Gaming and Balancing

The main models of cross-border data transmission regimes: EU, USA and China

Global data governance at a turning point? Rethinking China-U.S. cross-border data flow regulatory models

The Game Process and Achievement of EU and US Cross Border Data Flow Rules

Legal Regulation of Transnational Data Flows: International Experience and Chinese Solutions

Data Privacy: from Transparency to Fairness

Governing Cross-Border Data Flows: International Trade Agreements and Their Limits

Overview of Regulations on Cross Border Data Flow

Cross-border Data Flows: Regulations in international digital trade and China’s solution

Analysis of the Legal Regulation of Cross-border Flow of Financial Data in China

Data Policy Restrictions and Cross-border E-commerce: Evidence from China

A Comparative Analysis of Personal Data Protection Regulations Between the EU and China

Pluralism and Co-opetition: the Shift in the Governance of Cross-Border Data Flows and the Transformation of State Authority

Data Privacy Regulation and Cross-Border E-Commerce

International Law Protection of Cross-Border Transmission of Personal Information Based on Cloud Computing and Big Data

Regulating the Use of Big Data: Justifications, Perspectives and the Chinese Way Forward

Cross-Border Data Flows, the GDPR, and Data Governance

A Battle of the Big Three?—Competing Conceptualizations of Personal Data Shaping Transnational Data Flows

Governance in the Free Cross-border Flow of Data