Hostname: page-component-78c5997874-s2hrs Total loading time: 0 Render date: 2024-11-08T07:30:19.812Z Has data issue: false hasContentIssue false

INTERNATIONAL COMMUNITY IN THE GLOBAL DIGITAL ECONOMY: A CASE STUDY ON THE AFRICAN DIGITAL TRADE FRAMEWORK

Published online by Cambridge University Press:  04 November 2024

Neha Mishra*
Affiliation:
Geneva Graduate Institute, Geneva, Switzerland
Kholofelo Kugler
Affiliation:
University of Lucerne, Lucerne, Switzerland
*
Corresponding author: Neha Mishra; Email: [email protected]
Rights & Permissions [Opens in a new window]

Abstract

Global digital integration is desirable and perhaps even inevitable for most States. However, there is currently no systematic framework or narrative to drive such integration in trade agreements. This article evaluates whether community values can offer a normative foundation for rules governing digital trade. It uses the African Continental Free Trade Area (AfCFTA) Digital Trade Protocol as a case study and argues that identifying and solidifying the collective needs of the African region through this instrument will be key to shaping an inclusive and holistic regional framework. These arguments are substantiated by analysis of the regulation of cross-border data flows, privacy and cybersecurity.

Type
Articles
Creative Commons
Creative Common License - CCCreative Common License - BY
This is an Open Access article, distributed under the terms of the Creative Commons Attribution licence (http://creativecommons.org/licenses/by/4.0/), which permits unrestricted re-use, distribution and reproduction, provided the original article is properly cited.
Copyright
Copyright © The Authors, 2024. Published by Cambridge University Press on behalf of British Institute of International and Comparative Law

I. INTRODUCTION

The unprecedented growth of the global digital economy has triggered various policy shifts and divisions, creating a politically and legally messy space. Some scholars argue that digital tradeFootnote 1 rulemaking is predominantly driven by three powers: the European Union (EU); the United States (US); and China.Footnote 2 However, in practice, policymaking on digital trade is far more variegated, driven by different national policy objectives, motivations and actors. For instance, while several States are reluctant to commit to liberalising data flows due to concerns about losing their policy space to make sovereign choices in domestic digital regulation,Footnote 3 others have adopted a relatively open approach to data flows.Footnote 4 These priorities also shift in time. For instance, China (which adopted a highly restrictive approach in the past) recently started easing its data flow restrictions. In contrast, the US (which adopted a liberal approach for a long time) seems to be moving in a more restrictive direction to protect sovereign interests.Footnote 5

Sovereignty can mean different things in the digital context,Footnote 6 but the general thrust has been towards implementing inward-looking measures that disrupt global flows of digital goods and services.Footnote 7 Further, several developing countries have embarked upon programmes to promote their domestic digital sector and shield domestic companies from unfair competition.Footnote 8 Overall, regulatory fragmentation has increased significantly in recent years, thereby disrupting cross-border digital trade flows and impacting businesses and internet users alike.Footnote 9

Addressing digital trade fragmentation necessitates thoughtful interventions at different levels: international/regional; transnational; and domestic. International trade agreements have emerged as a popular forum to develop common frameworks for digital and data flows. For instance, several States have signed treaties containing rules on electronic commerce or digital trade in the last decade. These rules are spread over a network of Preferential Trade Agreements (PTAs) and Digital Economy Agreements (DEAs), creating what Burri and Chander call an emerging discipline of ‘digital trade law’.Footnote 10

Over the past decade, digital trade rules have become more comprehensive and complex, and even cover emerging areas of regulation such as artificial intelligence (AI) and open data innovation. The legal architecture of these rules is also evolving, especially with recent PTAs and DEAs coupling traditional trade rules with several soft-law frameworks and creating mechanisms to involve non-State stakeholders.Footnote 11 Yet, despite the rapid adoption of digital trade rules, clear divergences exist across treaties. More importantly, digital trade law lacks a coherent framework or unifying narrative to reify commonly shared values and interests among States.

This article offers a narrative for digital trade law that seeks to facilitate connections and trust-building between States facing common challenges in regulating cross-border digital flows. It explores whether viewing digital trade law through a community lens can facilitate digital trust and regulatory cohesion in an incremental, inclusive and pragmatic manner. It also explores the constraints and inherent limits of such a community lens. It argues that international community and solidarity, as broadly conceptualised in international law, can meaningfully inform rulemaking in digital trade law, including in addressing complex issues such as cross-border data flows. This is because States share common interests in integrating into globally interconnected digital markets and addressing transnational policy challenges in data and digital regulation. However, the identification and articulation of these common interests and norms are not always straightforward; thus, practical constraints exist in forming coherent digital trade communities.

This article uses the African Continental Free Trade Area (AfCFTA), and in particular the Protocol to the Agreement Establishing the AfCFTA on Digital Trade (AfCFTA DTP)Footnote 12 and related digital economy frameworks, as a case study to demonstrate the above arguments. It examines how and why common interests, needs and priorities can be a concrete basis to form an integrated and coherent digital trade community in Africa, using the examples of the regulation of cross-border data flows, data protection and cybersecurity. It further discusses how and why African policymakers should address practical policy challenges in balancing and aligning community-level and national interests. While this article focuses on Africa as a case study, the core arguments and conclusions can apply in other contexts, whether in other regional fora or the World Trade Organization (WTO).

The article is organised into four sections. Section II first briefly explains how international community and solidarity have been conventionally conceptualised in public international law. It then discusses their role and potential relevance to international trade law. Subsequently, it focuses on digital trade and investigates whether there are emerging communities in digital trade law and the extent to which they can successfully mobilise States at different levels of digital development.

Section III briefly introduces the African philosophy of Ubuntu, representing African community and solidarity values. This philosophy is used to provide a socio-political context for Section IV, where African digital trade regulation is examined in the context of the AfCFTA. Section IV explores three areas in this regard: cross-border data flows; privacy; and cybersecurity. It argues that while shared interests and values exist that can drive strong regional digital integration in Africa, there are also political and pragmatic problems in mobilising the digital trade community under the AfCFTA DTP, especially due to perceived risks to sovereignty. This section proposes pragmatic ways to navigate these tensions in the African regional ecosystem.

The article concludes by reiterating that although the meaning of community is not precise in international law, it can be important for providing a framework for negotiations on digital trade law. In particular, the flexibility and the dynamism that it provides will be a useful anchor to mobilise dialogues among States on several aspects of digital trade and should thus inform future rule-making for the digital economy.

II. TRACING INTERNATIONAL COMMUNITY AND SOLIDARITY

This section briefly traces the various ways in which international community and solidarity are conceptualised in public international law, highlighting both their strengths and limitations. Next, the section highlights the extent to which underlying values or shared interests defining a community can be traced in international trade law. Finally, it turns to digital trade law and examines the extent to which different initiatives in various PTAs and DEAs focused on digital trade result in a distinct community or reflect an emerging digital solidarity. The latter discussion highlights the constant and complex interplay of the emerging regional/plurilateral consensus, and the domestic preferences related to digital sovereignty.

A. International Community and International Solidarity in Public International Law

The relevance of both international community and solidarity has been debated at length in public international law, both from a legal and normative perspective.Footnote 13 While international law often makes references to international community in varied contexts, the concept does not have a precise meaning.Footnote 14 Although occasional reference is made to the ‘international community of States’,Footnote 15 a more common formulation is the ‘international community as a whole’,Footnote 16 referring to the collectivity of States.Footnote 17 In an ideal scenario, international community must be viewed as transcendental, ie it exists to fulfil interests and goals beyond the interests of specific States.Footnote 18

In the present-day complex international legal system, a variety of political actors play critical roles. Thus, in addition to States, international and regional organisations, policy networks, transnational communities, sub-State entities, and even individuals have a role to play in the formation of any international community.Footnote 19 For instance, the membership of an international community is not only limited to global bodies such as the United Nations (UN),Footnote 20 but also regional and international bodies such as the Association of Southeast Asian Nations (ASEAN), the African Union (AU) and the Organisation for Economic Co-operation and Development (OECD).Footnote 21 This means that the international community as a whole consists of multiple layers, with some of these bodies being regional, some transnational and others international. This diversity of membership is particularly prevalent in today's world, where traditional international legal instruments/institutions are facing immense pressure. Further, international community values may not only be found in hard law springing from traditional multilateral groupings but could also spring from norms, principles and soft law common to multistakeholder, transnational and regional bodies.Footnote 22

International community (including at the global level) evolves and changes with time, especially with dynamic shifts in power relations. For instance, new groups and coalitions may be formed to represent certain community interests, eg, a plurilateral grouping of States or a transnational body rallying around a common policy concern. In its most radical formulation, some scholars have argued that international community ultimately consists of individuals, although this assertion does not enjoy strong support from most scholars.Footnote 23

Broadly, three views exist regarding the existence of an international community. The first group of scholars argues that international community finds clear expression in the most fundamental treaties underlying the international legal order such as the UN CharterFootnote 24 and the International Law Commission (ILC) articles on State Responsibility, and even in judgments of the International Court of Justice.Footnote 25 In understanding its legal implications, scholars often refer to the existence of jus cogens norms or peremptory norms of international law, and erga omnes obligations, which are obligations owed to the international community as a whole.Footnote 26

From the above, the logical deduction that international community is interlinked with international law could be made.Footnote 27 For instance, Simma argues that the international legal order has moved on from bilateral relations and purely State consent-driven co-existence to a world of significant international cooperation.Footnote 28 He further posits that this shift signifies the existence of an international community based on shared common interests (in contrast to reciprocal obligations) and the constitution of a ‘socially conscious legal order’.Footnote 29 Other scholars similarly argue that the international legal system is built on common valuesFootnote 30 and the international community is the basis of a ‘rule-based constitutive perspective of world politics’.Footnote 31 Rudall argues that international law has a ‘minimum ethical core’ consisting of ‘universalist ideals’ and ‘community values’.Footnote 32 These views signify a two-way relationship of international law and community, wherein international law regulates the international community and the international community constitutes and contributes to the international legal order. However, this school of thought does not clarify who the constituents of the international community are and how they shift over time.

The second group of scholars argues that international community is a flexible normative concept, which can be given contextual meaning and interpreted in different ways. For instance, Hakimi argues that even though jus cogens norms and erga omnes obligations can be considered community values defining the international legal order, their substantive content is subject to interpretation.Footnote 33 Thus, different interests or potential discord between States does not mean that an international community is absent, but rather dissent/differences are also constitutive of the community.Footnote 34 In turn, this means that international community is imperfect but flexible and can be fashioned to create dialogues among States and other stakeholders.

The third view, aligned with realistic thinking, is that international community is a mythical concept. In a world of unequal power relations, an international community does not actually exist. Abi-Saab argues that the presence of an international community has been undermined in the post-Cold War era.Footnote 35 Dupuy contends that the international community is a myth in the sense that States act as if an international community exists, but, in reality, it is simply legal fiction.Footnote 36 Consequently, States use the idea of international community as and when it is convenient to satisfy their individual interests.Footnote 37 Further, international community can often become a tool to exclude certain States such as non-liberal States.Footnote 38 While this view rightly recognises that power relations impact how any international community is constituted, it ignores that communities in the international legal order are nuanced, multilayered, flexible and dispersed in different locations, as argued above.

This section now turns to an examination of international solidarity, which can spring from the presence of an international community. The principle of solidarity has long been used in international law as setting a foundation for international cooperation,Footnote 39 but its legal relevance and even its existence are debated.Footnote 40 Nonetheless, it has found expression in drafts of the UN Declaration on Human Rights and International Solidarity, where it has been defined as an ‘expression of unity by which peoples and individuals enjoy the benefits of a peaceful, just and equitable international order, secure their human rights and ensure sustainable development’.Footnote 41 This draft declaration characterises it as a human right, that binds States, international organisations and private bodies.Footnote 42 However, this instrument is vague as it refers to lofty objectives such as ‘justice, peace, sustainable development and equitable and fair partnerships between States’ and ‘protection and fulfilment of human rights and fundamental freedoms for all individuals’.Footnote 43 It also imposes heavy obligations on States to engage with other States and non-State actors to implement solidarity, without setting out clear and binding mechanisms.Footnote 44

While international solidarity may have an ambiguous meaning, it has a certain normative value and appeal. For instance, as a moral objective, it provides a direction for international law.Footnote 45 Scholars have tested the relevance of the idea of solidarity in different contexts to facilitate international cooperation in areas such as environmental law, climate change law and human rights.Footnote 46 Other scholars have taken a more extreme (and perhaps less actionable) view, where they consider international solidarity as altruistic behaviour to achieve the common good.Footnote 47 Cosmopolitan thinking also emphasises that solidarity exists beyond mere State interests as human beings hold compassion towards others across borders.Footnote 48 In practice, self-interested solidarity, for example, where States cooperate when they face common problems, is arguably more pragmatic than altruistic solidarity.Footnote 49 However, altruistic behaviour in the international community is not entirely likely in a humanitarian or environmental disaster.

B. The Existence of Community Values and Solidarity in International Trade Law

International trade law governs trade relationships between States. Predictably, the mainstream view is that it is a discipline based on mercantilist interests focused on bilateralism and reciprocity,Footnote 50 without any clear community values. This article will now examine an alternative view that international trade law can be understood from the perspective of community values, ie, it is driven by shared interests among States transcending bilateral, reciprocal interests.

At the outset, it is acknowledged that arguments can be made opposing this inquiry. First, the power differentials in the global trading system make it hard to view bodies such as the WTO as institutions of an international community with common, shared values.Footnote 51 Second, the formation of an international trade organisation such as the WTO is seen as ceding sovereignty (or at least certain aspects of it), challenging basic notions in international law.Footnote 52

To understand the values underlying international trade law better, the foundational elements in trade treaties must be examined, particularly to discern whether the idea of international community finds any direct or indirect expression in them.Footnote 53 This examination reveals that several trade treaties set out policy objectives that represent community values transcending individual State interests. In fact, the Havana Charter (the first international trade treaty, that sought to establish the stillborn predecessor of the WTO, the international trade organisation) identifies as one of its objectives the facilitation ‘through the promotion of mutual understanding, consultation and co-operation the solution of problems relating to international trade …’.Footnote 54 The foundation of the WTO was to create a framework for economic interconnectivity and cooperation between States that trade with each other.Footnote 55 These goals cannot be achieved by any State acting alone—they are only possible if there is a community at the international level.Footnote 56 Therefore, the participation and acceptance of the obligations that come with the membership of the WTO community can be seen as a self-interested choice made by States to achieve commonly shared interests, instead of a forced act of giving up domestic policy space and sovereignty on certain aspects of domestic affairs.

The architecture of the WTO itself must also be examined in more detail. It consists of 166 members,Footnote 57 but does that mean it constitutes an international community? Unlike the UN Charter or the ILC Articles on State Responsibility, WTO treaties do not make any clear reference to ‘international community’. Yet, the WTO often refers to community interests and international community. For instance, in the 12th Ministerial Conference held in June 2022, the WTO Director-General (DG) stated in her speech: ‘this is a time to demonstrate that … the WTO can deliver for the international community, and the people we serve’.Footnote 58 Who is the DG referring to as the international community? Who determines the interests of this community?

First, the preamble of the WTO Agreement should be examined. It states that the key objectives of the WTO include raising standards of living, ensuring full employment and increasing real income.Footnote 59 It further acknowledges the need to ensure that developing countries share in the growth in international trade, especially taking into account the different levels of economic development in the WTO membership.Footnote 60 Although it recognises that trade barrier reduction entails reciprocal bargaining, this is ultimately aligned with the goal of creating an integrated, viable and durable multilateral trading system.Footnote 61 In other words, boosting economic welfare, promoting sustainable development and reducing poverty are underlying objectives of the WTO system.Footnote 62 These objectives can be seen as global community values.

Certain scholars argue that community values, such as the objectives enshrined in the WTO Agreement, can help create a rules-based and fair global market.Footnote 63 For example, provisions on non-discriminatory treatment and exceptions that balance trade and other public interests could be seen as emphasising community values.Footnote 64 Some scholars such as Wolfrum have also argued that provisions on the most-favoured nation obligation, which prohibit WTO members from discriminating against other members if they are providing a specific trade advantage to any party (including a non-WTO member), reflect a commitment to the entire global economic community and not bilateral interests between two States.Footnote 65

The implementation of the above principles has been far from perfect. However, as argued below, these lapses in acknowledging community values do not mean that they do not exist in WTO treaties. Rather, it means that WTO members must be nudged to implement their commitments in the spirit of the community values embedded in the Agreement. For instance, while the WTO treaties provide different exceptions and carve outs to balance the policy space desirable for domestic regulation with the broader objectives of trade liberalisation, constant endeavour is necessary to optimise and implement these mechanisms. As an example, a well-reasoned approach is essential to examine scenarios where the domestic political or economic systems of WTO members have a trade-inhibiting impact.Footnote 66 Similarly, trade tribunals must be judicious in applying the balancing mechanisms under the exceptions, especially as sovereignty-related interests change over time.Footnote 67

In fact, taking this argument a step further, in order to implement the existing provisions and safeguards in WTO law that balance varied domestic and global interests, community values are critical. For instance, a shared sense of community values can be instructive in interpreting the goals of WTO law in a manner that supports global economic welfare. From the perspective of bilateralism, the goals of WTO law may be viewed as representing narrow economic interests underlying bilateral trade relationships between States. In contrast, using a community lens, the objectives set out in the WTO Agreement can be given a much deeper and more coherent meaning. This is evident in WTO practice such as the growing importance of incorporating values of sustainable and inclusive development into WTO law.Footnote 68 Moreover, in numerous reports, WTO panels and the Appellate Body have read important policy goals into the existing framework of WTO law.Footnote 69

Similarly, the exceptions allow States to balance their trade liberalisation obligations with important domestic policy objectives. This allows them to give preference to important public interests over pure economic interests and, at the same time, links domestic policy values to global economic relations.Footnote 70 For instance, in certain areas of domestic regulation, a wide reading of available policy space is more likely to be misused by powerful, dominant States than to serve the interests of developing countries.Footnote 71 In fact, in several disputes, panels have adopted a carefully measured reading of the exceptions to ensure a fair and balanced approach. Taking into account the community objectives of WTO law would ensure that exceptions are read in a manner that protects and promotes global economic welfare.

Some scholars argue that special and differential treatment (SDT) constitutes an important expression of solidarity in international trade law,Footnote 72 although the implementation of these provisions leaves much to be desired, as argued below. Existing SDT provisions provide some concessions and benefits to developing countries such as technical assistance and capacity building, preferential treatment and additional time to comply with certain obligations.Footnote 73 Certain WTO treaties such as the Trade Facilitation Agreement, with its tiered implementation structure, provide additional time and financial support for compliance to developing countries.Footnote 74 Further, several provisions in trade treaties require developed countries to take into account the special needs of developing countries and, particularly, least developed countries (LDCs).Footnote 75

However, SDT provisions are often considered meaningless and symbolic due to their largely non-binding, discretionary nature and weak implementation.Footnote 76 This can be seen as a failure of the WTO membership to offer fair and meaningful opportunities to developing countries. This has been a major cause for political turmoil in the global trading order, and particularly the WTO, in recent years,Footnote 77 stemming from the failure of the WTO membership to acknowledge the importance of community values in implementing SDT provisions.Footnote 78 Thus, in thinking about future trade rules, SDT provisions must be designed and implemented differently, in a manner that strengthens the global economic community envisaged under the WTO, including by better aligning the interests of developing and developed countries.

The voting architecture of the WTO builds on the idea of a core community, but reality shows much more complexity in how communities have been constituted, as membership has evolved. Under the consensus-based voting mechanism of the WTO Agreement,Footnote 79 each member has an equal vote irrespective of its economic stature, thus symbolising an inclusive, equal community. Yet, the consensus mechanism is not without its constraints. For instance, as the WTO membership has grown in number and diversity, agreement has become harder to reach, calling into question whether the WTO community still exists today. Due to the breakdown of several multilateral talks owing to disagreements between WTO members, several plurilateral negotiations have emerged in areas such as e-commerce, investment facilitation and domestic regulation on services. One way of viewing such divisions is that the international community is not static, and thus the formation of these plurilateral groupings is not necessarily a disruption of the community, but rather its reconfiguration through the formation of new alliances representing shared interests. These discords and differences, as Hakimi argues, are constitutive features of international communities.Footnote 80

The discussion so far suggests that an international community is embedded in international trade law (at least in some shape or form). However, it also indicates that community values often need to be strengthened and, if necessary, reconfigured to address power imbalances or changing political dynamics in trading relationships. This confirms the views of leading public international law scholars. For instance, Simma and Paulus argue that economic solidarity can be a value that connects States at different levels of development.Footnote 81 Hakimi similarly argues that economic interdependence in the global order can form a basis for acting in common interests.Footnote 82

The failings of the global economic community are most visible in moments of crisis. For instance, during the COVID-19 pandemic, supply chain disruptions and the calls for reshoring and friend-shoring—returning manufacturing and other business operations to the home State from elsewhere or restricting the supply chain to ally States—led to a complete disruption of the global economic order and the failure of the community to act together. Consequently, there were urgent calls at the WTO and other trade bodies to respond to the crisis faced by the entire community.Footnote 83 A transparency mechanism was created to record and track COVID-related trade restrictions and support measures.Footnote 84 While these examples may be seen as a breakdown of the trade community, constructive responses from smaller groups of States also took shape to address these challenges. For instance, the suspension of the operations of the Appellate Body led to the constitution of the Multi-Party Interim Appeal Arbitration Arrangement (MPIA) in April 2020 by 47 WTO members.Footnote 85 Similarly, the WTO has been engaging in discussions around the Global Supply Chains Forum to create more integrated and robust supply chains.Footnote 86

A dynamic and pluralistic view of community can be helpful in making sense of the above responses. While the community endorsing several of the above initiatives is smaller than the WTO membership, these smaller communities also represent shared values/interests and thus help create liaisons rather than fragmenting global power structures. Such flexible evolution and adaptation of new communities in the WTO ecosystem is crucial at the present time, as trade goals are increasingly being seen as disconnected from domestic policy.Footnote 87 Such communities also connect the gaps between the domestic and regional/global policy communities (eg, at the WTO, regional trade bodies) to develop a holistic understanding of how to interpret the shared goal of global economic welfare underlying international trade law.

C. International Community and Solidarity in Digital Trade Law

Having discussed the role of international community and solidarity in international trade law, this section examines digital trade regulation. Several efforts are ongoing in different global and regional bodies to address digital trade-related concerns. In addition to trade treaties, several regional bodies have developed other policy instruments to facilitate consensus on shared values and principles for the digital economy.Footnote 88 Some recent initiatives also focus on multistakeholder models, high-level political declarations, and instruments developed by transnational policy networks.Footnote 89 This plurality of initiatives is expected given the multidimensionality of digital trade. This section will now examine whether such diverse initiatives can result in a distinct digital trade community or reflect an emerging digital solidarity.

1. Development of data regulatory frameworks for digital trade

One of the toughest issues in digital trade is the regulation of cross-border data flows, especially given the different perspectives of governments, businesses and other important stakeholders such as internet policy and technical communities. At its very core lies a conflict of two values: data sovereigntyFootnote 90 (which may be seen as representing the self-interested behaviour of States); and an open and free internetFootnote 91 (arguably, representing a type of community value premised on global connectivity and economic freedom).

Scholars argue that data sovereignty is a double-edged sword; while it can be used to protect public interests genuinely, it can often become a tool of oppression or protectionism.Footnote 92 Most States do not operate at the extreme ends of this spectrum, having developed a framework for cross-border data flows combining data sovereignty concerns with practical concerns around global connectivity.Footnote 93 As yet, a preferred approach to this balancing act has not presented itself, as States have not come to a consensus on the common values necessary to develop a global framework for data regulation.

States have a shared interest in being connected to global networks to benefit from digital trade. These shared interests also explain the rapid development of digital trade law in recent years. For instance, the Trade Agreement Provisions on Electronic Commerce and Data (TAPED) dataset,Footnote 94 that tracks digital trade commitments in PTAs and DEAs, indicates that 78 PTAs contain commitments on the promotion of digital trade, of which 65 have soft commitments and only 13 contain binding commitments.Footnote 95 These agreements are spread across different jurisdictions. Similarly, with respect to provisions that require the cross-border flow of data for digital trade, 49 PTAs contained some level of commitment, with 30 PTAs taking on hard obligations, although all these provisions contain national security and public policy exceptions.Footnote 96 Similarly, 31 PTAs contain commitments on the prohibition of data localisation measures.Footnote 97 Several recent PTAs also recognise the importance of data protection by requiring States to adopt a domestic regulatory framework. According to TAPED, 145 PTAs have commitments on data protection, with 41 of these PTAs containing hard commitments. Finally, commitments on cybersecurity cooperation can be found in 67 PTAs.Footnote 98

While hard PTA commitments on the above aspects indicate shared interests among parties, the varied language used in these commitments reflects different degrees of consensus on and understanding of these interests. For instance, while States have agreed to adopt domestic data protection frameworks in several PTAs, the prescribed benchmarks for an adequate regulatory framework for personal data protection vary significantly. While the US-driven treaties adopt a lenient approach and even include voluntary frameworks as possible benchmarks, the EU-driven treaties usually contain comprehensive requirements for domestic data protection frameworks.Footnote 99 However, the US has committed to higher standards of data protection in certain treaties such as the United States–Mexico–Canada Agreement (USMCA), by referencing the OECD Privacy Guidelines.Footnote 100 Similarly, while certain China-driven treaties such as the Regional Comprehensive Economic Partnership (RCEP) have language on data flows and data localisation, these provisions are weak as they are subject to self-judging exceptions and not subject to dispute settlement.Footnote 101 This approach can be contrasted with the far stronger provisions in treaties signed by other States such as Australia, Japan and Singapore. China has, however, expressed interest in joining treaties with stronger provisions on data flows such as the Digital Economy Partnership Agreement (DEPA)Footnote 102 and the Comprehensive and Progressive Agreement for Trans-Pacific Partnership (CPTPP).Footnote 103

The above discussions indicate that as economic and political interests evolve, the alignment of interests and incentives across communities changes. For instance, the US changed its stance on cross-border data flows and data localisationFootnote 104 almost immediately after China loosened several restrictions in its domestic laws on cross-border data flows.Footnote 105 While the repercussions of these changes are not yet clear, it might be pondered whether China, for instance, may be more willing to participate in more liberal/open digital trade frameworks. Similarly, while the EU objected to negotiating frameworks on cross-border data flows and data localisation for several years, it has shifted policy priorities in recent years in its treaties with the United Kingdom (UK), New Zealand and Japan. These treaties contain provisions on cross-border data flows and data localisation, but with a carve-out for domestic data protection law. Similarly, China and Vietnam have pushed for self-judging exceptions in the RCEP that shield their domestic cybersecurity laws from disputes. The constant shift of values and interests in digital trade can result in the re-configuration of digital trade communities from time to time. While realists might view these developments as a pure articulation of sovereign interests, these dynamic shifts are nuanced and depend on how States want to position themselves in different digital trade communities.

In addition to the treaties, certain regional bodies are proactively developing principles to enable digital connectivity, digital trade and data flows. For example, ASEAN members agreed upon a blueprint in 2015 to implement a high-level regulatory framework for e-commerce.Footnote 106 They subsequently developed the ASEAN E-Commerce Agreement,Footnote 107 Framework on Data Governance,Footnote 108 Digital Integration Framework Action PlanFootnote 109 and ASEAN Model Contractual Clauses.Footnote 110 They are now negotiating a regional Digital Economy Framework Agreement (DEFA), with the aim of establishing an open, secure, interoperable, competitive and inclusive regional digital economy.Footnote 111 A key component of DEFA is addressing digital development disparities across the region and preparing micro, small and medium-sized enterprises to participate meaningfully in digital ecosystems.

Several other policy networks and multistakeholder bodies are also engaged with developing high-level values and principles for the digital trade community. For instance, the Global Privacy Assembly, consisting of over 130 data protection and privacy authorities across the world, has developed various high-level principles to enable privacy-compliant data flows. This includes declarations and other principles on cross-border privacy and cybersecurity enforcement, data sharing, governmental access to data, and regulation of emerging digital technologies such as AI and facial recognition.Footnote 112 Other bodies such as the Internet Society,Footnote 113 UN agenciesFootnote 114 and multistakeholder initiatives such as the Internet Jurisdiction and Policy NetworkFootnote 115 and DatasphereFootnote 116 also address different principles necessary for the regulation of cross-border data flows. A common theme across these initiatives is developing shared norms to enable cross-border data flows while preserving core policy goals such as privacy and cybersecurity.

An area where community-level consensus building is necessary and timely, but has been underexplored to date, is digital inclusion and development. While some recent DEAs contain provisions to foster digital inclusion,Footnote 117 further initiatives are necessary to support digitally excluded groups through knowledge exchange and dedicated work programmes. Such initiatives would be much more meaningful if there were stronger understanding of shared interests in the relevant communities, especially at the regional level and, particularly, resulting from active participation of developing countries.

2. Is there an emerging community in digital trade law?

While the above section highlights various digital trade initiatives, there is a need to examine further whether these initiatives indicate an existing or emerging digital trade community. If so, who are the constituent members and what are their values? These questions are significant because a globally interconnected internet infrastructure and economy has benefits, thus creating an obvious basis for shared interests among States. Certain recent proposals such as the Data Free Flow with Trust (DFFT) proposed by Japan at the G20 in 2019Footnote 118 (and thereafter considered across many other fora such as the OECD and Group of Seven (G7)) indicate shared interests (at least among digitally developed countries). Further, since several data-related issues constitute transnational policy concerns, exploring shared values and building consensus in different digital trade communities is feasible.Footnote 119

In addition to the more trade-related concerns in the digital economy, a global consensus is emerging in relation to preserving certain core values in data governance frameworks to build a just and equitable framework for the digital economy.Footnote 120 This consensus is already visible in some contexts. For instance, a diverse group of States has shown a common interest in developing meaningful data sharing and interoperability practices to create a fairer and more equitable digital economy.Footnote 121 Certain groupings of States have agreed upon high-level ethical principles for the regulation of emerging technologies such as AI.Footnote 122 Similarly, international organisations and multistakeholder bodies are developing high-value and open data sharing projects that can create global public goods.Footnote 123 All these areas where States share common values/interests are ripe for collective action by the digital trade community.

Finally, digital trade law is undergoing a shift from focusing solely on reciprocal bargaining for market access to developing regulatory frameworks on data flows. These new areas require comprehensive identification of cross-cutting principles and values across States as they impact the domestic policy space. For example, certain recent PTAs contain provisions on data protection and cybersecurity cooperation. A growing network of DEAs is moving away from the traditional trade paradigm to look at the regulation of the digital economy as a holistic issue including through soft-law frameworks in areas such as AI, digital identities and digital payments. To foster discussion on such a wide variety of digital governance issues with both domestic and transnational policy implications, a community lens can be highly useful.

Nonetheless, it is acknowledged that digital trade communities can be a tool for both inclusion and exclusion. As an example, this tension is visible in the ongoing negotiations on a cybercrime treaty at the UN, where certain States have argued that the proposed provisions are a cover for imposing data localisation and stringent censorship of digital networks.Footnote 124 Similarly, the burgeoning tech war between the US and China is visible in the way digital trade communities are developing. For instance, the US left China out of the Indo-Pacific Economic Framework for Prosperity (IPEF) initiative (one of the pillars focuses on digital trade and data flows) despite its Asian focus.Footnote 125 China has, however, developed its alliances in the Asia-Pacific region through the RCEP.Footnote 126 Interestingly, however, certain States such as Australia and Japan are part of both initiatives, thus indicating that different States may share varied interests with members of different communities. Therefore, in mobilising different communities, different constituent stakeholders must account for the flexibility and diversity necessary to engage fruitfully on these topics in different fora.

III. UBUNTU: THE AFRICAN PHILOSOPHY OF COMMUNITY AND SOLIDARITY

Before exploring the role of community in enabling digital trade integration in Africa in the next section, this section outlines the African communitarian philosophy of Ubuntu to provide the context for the discussion. Ubuntu is often seen as an opaque concept that is not capable of being concretely defined.Footnote 127 Its meanings are multiple because its origins cannot be pinned down to a particular time in Africa's history.Footnote 128 Etymologically, the word ‘ubuntu’ is an abstract noun comprising a combination of the root -ntu, which means a ‘person’ or ‘human being’ and the prefix ubu-, which means ‘to be’.Footnote 129 One description of Ubuntu is the positive moral qualities of a person.Footnote 130 Ramose, an eminent Ubuntu scholar, characterises Ubuntu as ‘a lived and living philosophy of the Bantu-speaking peoples of Africa’.Footnote 131 It is also perceived as African humanism,Footnote 132 a moral theory or ethics,Footnote 133 and an African worldview.Footnote 134

Although Ubuntu as a concept has its roots in southern Africa, it is often regarded as part of a broader African worldview, sharing philosophical ties with African humanist traditions such as Julius Nyerere's Ujamaa or Leopold Senghor's négritude.Footnote 135 The latter similarly emphasise collective well-being and the empowerment of African people. In the area of politics and law, the values ascribed to Ubuntu have included justice, fairness and equity.Footnote 136

The normative appeal of Ubuntu in the context of developing regional and international law is largely untested outside of Africa. There is a contrast, however, between the ideals informing international law (especially as understood in the Western world), placing value on the individual and individualism, and Ubuntu, which views an individual in relation to their community.Footnote 137 However, Qobo and Nyathi argue that Ubuntu should not be viewed as an exotic philosophy applicable only to Africans as it represents ‘fundamentally human qualities that at different points coloured various cultures and civilisations’.Footnote 138 They posit that Ubuntu can offer a useful paradigm for international relations and an alternative to the power structures and Western hegemony that have significantly constrained global affairs.Footnote 139

Other scholars have also made a strong case for using the philosophy of Ubuntu in the international legal context. For instance, Chengeta argues that the philosophy of Ubuntu or humanity has permeated public international law and forms the basis of many of its branches. He notes that humanity is central to, for example, international human rights law and international humanitarian law, finding concrete expression in the latter in the Geneva Conventions on the Law of War and their Additional Protocols.Footnote 140 An illustration of the concept of humanity is shown in, for example, the provisions on exercising due restraint in warfare which are applicable even in relation to prisoners of war. Chengeta considers that the concept of humanity, and thus Ubuntu, can be defined as a normative standard.Footnote 141

While some sceptics might view the above assertions as controversial or utopian, there are clear examples of the manifestation of Ubuntu in State practice. For instance, South Africa has used Ubuntu as a tool to frame its foreign relations, recognising global ‘interconnectedness and interdependency’ and the need to respect all nations, people, and cultures.Footnote 142 The government has further recognised that promoting and supporting the positive development of other States is aligned with its national interest, and that ‘national security would therefore depend on the centrality of human security as a universal goal, based on the principle of Batho Pele (putting people first)’.Footnote 143 The South African judiciary has also relied upon the concept, using it as a principle of judicial interpretation. In S v Makwanyane, the Constitutional Court judgment that abolished the death penalty in South Africa, Mokgoro J considered it important to recognise indigenous South African values, particularly those of Ubuntu, in constitutional interpretation and State decision-making.Footnote 144

The above contextualisation of African socio-political values with parallel concepts from international law is crucial to better understand the role of community values in the African digital trade ecosystem, discussed in the following section.

IV. PROSPECTS AND CHALLENGES FOR THE AFCFTA AS AN EMERGING INTERNATIONAL COMMUNITY IN DIGITAL TRADE

The AfCFTA Agreement is an Africa-wide free trade agreement (FTA) that seeks to enhance regional integration by increasing intra-African trade and investment. It is the largest trade agreement by number of parties since the creation of the WTO. This agreement is a significant piece in the African puzzle of creating a single continental market with free movement of goods, services, people and capital. The AfCFTA encompasses over 1.2 billion people with a combined gross domestic product (GDP) of more than $2.5 trillion.Footnote 145 If fully implemented, it is expected to increase regional trade by 16 per cent.Footnote 146 The AfCFTA Agreement entered into force on 30 May 2019, 30 days after the receipt of the twenty-second instrument of ratification on 29 April 2019.Footnote 147 The operational phase of the AfCFTA Agreement was launched on 7 July 2019. After COVID-19-related delays, trading under the AfCFTA Agreement officially started on 1 January 2021. To date, 54 AU Member States have signed the AfCFTA Agreement, and 48 have deposited their instruments of ratification.Footnote 148

The AfCFTA negotiations were launched in June 2015,Footnote 149 and have been divided into three phases. Phase I covered trade in goods and services and dispute settlement.Footnote 150 Phase II negotiations (launched in February 2019) covered intellectual property rights, investment and competition policy.Footnote 151 Finally, the negotiations of Phase III of the AfCFTA Agreement on digital trade and women and youth were announced in February 2020 but began in December 2022 due to the COVID-19 pandemic.Footnote 152 The AfCFTA DTP was eventually adopted by the Assembly of the Heads of State and Government of the AU at its Thirty-Seventh Ordinary Session held from 17 to 18 February 2024 in Addis Ababa, Ethiopia. Although adopted, negotiations on the AfCFTA DTP's eight annexes are ongoing. The following annexes will be developed: rules of origin; cross-border data flows; cross-border digital payments; source code disclosure; digital identities; financial technology; emerging and advanced technologies; and online safety and security.Footnote 153

Despite the delays, the AfCFTA DTP was negotiated in 14 months, considerably quicker than the Phase I and II negotiations.Footnote 154 Such rapid negotiation of an FTA is unprecedented for Africa and, indeed, also uncommon elsewhere. It indicates the high priority accorded to the digital economy in Africa's trade agenda and highlights Africa's strong sense of community and collaboration on digital trade issues. The AfCFTA and the AfCFTA DTP, in particular, are apt case studies because of the significance of these instruments to Africa's economy and the philosophy of Ubuntu and community in general that underpin their development.

Indeed, Africa is on the cusp of a drastic digital transformation, accompanied by regulatory innovation in the form of the AfCFTA DTP, among other initiatives. However, despite the developments, serious challenges remain, such as an ever-growing asymmetry in digital development creating a yawning digital divide.Footnote 155 Some issues require a careful balancing of domestic and regional interests, such as cross-border data regulation which raises concerns at both domestic and Africa-wide regional levels.Footnote 156 This section argues that a digital trade community is gradually emerging at the African continental level and in the Regional Economic Communities (RECs) in the regulation of cross-border data flows, privacy and cybersecurity. It highlights examples of existing strategic frameworks in the region and the provisions of the AfCFTA DTP that conceptualise the future of digital trade regulation in Africa and establish shared norms and principles. Developing a robust pan-African regulatory framework for data governance necessarily requires a sense of collective responsibility underlined by community/Ubuntu values. Therefore, the implementation of the AfCFTA DTP, including the negotiation of the outstanding annexes—among which the Annex on Cross-Border Data Flows is of particular relevance for this article—must strengthen the consensus on digital trade rules and foster mechanisms that nurture the embryonic AfCFTA digital trade community.Footnote 157 This is fundamental to regulating the digital economy in a manner tailored to African realities while giving the continent a powerful voice in the relevant global fora.

The establishment of the AfCFTA is a powerful politico-legal manifestation of African collaboration and solidarity. From the perspective of this article, it can also be viewed as a manifestation of community values and shared interests among members of the African community, international law and, more importantly, the praxis of Ubuntu. Since the beginning of Africa's formal economic integration in the 1980s, African States have recognised that ‘shared prosperity and well-being’Footnote 158 can only be fully realised by political cooperation among themselves.Footnote 159 Given that the African region comprises 55 States, including 33 LDCs,Footnote 160 13 lower-middle-income economies, 7 upper-middle-income economies and a high-income economy,Footnote 161 achieving such cooperation is not an easy task. Nonetheless, African States have maintained a strong dedication to their collective future, as demonstrated below.

A. Unpacking the AfCFTA DTP and Related Instruments

A core ambition for the African region's digital trade community is creating an optimal intra-African regulatory framework to tackle some of the digital economy's most pressing issues: cross-border data flows, data protection and cybersecurity. The AfCFTA State Parties face the gargantuan task of ensuring normative cohesion, fragmentation limitation, regulatory interoperability and the adoption of standards to permit the seamless integration of the African digital trade market. These challenges mirror those experienced globally, as States have struggled to achieve alignment on these issues. Despite the complexity of the task, the AfCFTA State Parties have the potential to develop meaningful norms that focus on common challenges in the region, such as limited data infrastructure, technical expertise and regulatory resources, thereby also promoting a community perspective.

Several regional bodies, including the AU and certain RECs, have contributed to the development of instruments to build a digital trade community and support the establishment of the African Digital Single Market.Footnote 162 In addition to the AfCFTA DTP, several other continental digital strategies capture the spirit of African interdependence and solidarity in creating a common and inclusive regulatory framework on digital trade. For instance, the Digital Transformation Strategy for Africa 2020–2030 and the AU Data Policy Framework provide strategic direction for physical and regulatory infrastructure for the digital economy in Africa. Specifically, the Digital Transformation Strategy has been developed to ‘guide a common, coordinated digitalization agenda, enhance synergies and avoid duplication of effort’.Footnote 163 It sets a clear vision for the AU to establish

an integrated and inclusive digital society and economy in Africa that improves the quality of life of Africa's citizens, strengthens the existing economic sector, enables its diversification and development, and ensures continental ownership with Africa as a producer and not only a consumer in the global economy.Footnote 164

Significantly, the founding principles of the Digital Transformation Strategy include solidarity and cooperation.Footnote 165 It also refers to collaborative imperatives of establishing harmonised policy, legal and regulatory frameworks,Footnote 166 strengthening collaboration between African institutions and regulatorsFootnote 167 and infrastructure sharing to defray limited resources.Footnote 168

In parallel, the AU Data Policy Framework provides principle-based guidance to AU Member States in their domestic adoption of the continental data policy.Footnote 169 It considers the digital economy as a means of introducing ‘huge opportunities for more interconnected and interoperable markets and offers avenues for tech start-ups and e-businesses to flourish’.Footnote 170 This instrument specifically aspires to align with international law and the values of the AU to achieve greater unity and solidarity between African States and their peoples.Footnote 171 As such, some of the high-level principles guiding the framework include cooperation, fairness and inclusiveness.Footnote 172

B. Creating Regulatory Frameworks in Three Key Areas

The relevant elements of these and other digital trade-related instruments, including those adopted by RECs and AfCFTA State Parties, are discussed below in relation to the three main issues currently impacting digital trade: cross-border data flows; data protection; and cybersecurity. These instruments form an important basis for building a digital trade community in Africa and thus should also embody the spirit of Ubuntu in African regional integration. However, building such a community also entails challenges. For example, certain African States are simultaneously adopting restrictive domestic policies and legislation to regulate aspects of the digital economy. As argued above, the existence of multiple, overlapping and sometimes conflicting legal instruments can result in fragmentation and thus weaken the digital trade community that is necessary to realise the African Digital Single Market.

1. A regional framework for cross border-data flows

Data flows have become invaluable and central to businesses and business practices everywhere,Footnote 173 including in Africa. However, paradoxically, the adoption of cross-border data restrictions, particularly data localisation requirements, is increasing globally, including in Africa.Footnote 174

A data localisation requirement is a regulatory mandate that data generated within a State's borders must be stored, processed or managed within that State. These laws are typically designed to ensure that sensitive information, particularly personal data or data critical to national security, remain under the jurisdiction and control of the government. Therefore, the cross-border transfer of such data may be restricted. As of December 2023, 27 States maintained approximately 140 data localisation requirements.Footnote 175 In Africa, Nigeria maintains strict data localisation requirements in five areas: payments; subscriber and consumer data; sovereign data; and for national security and economic development purposes.Footnote 176 Other African States have adopted strict data localisation requirements based on other rationales. For example, section 70(1) of Zambia's Data Protection Act prohibits the cross-border transfer of ‘sensitive’ personal data.Footnote 177 Some States have adopted sector-specific restrictions. UgandaFootnote 178 and RwandaFootnote 179 maintain restrictions in financial services, and RwandaFootnote 180 (and Nigeria in respect of subscriber and consumer data, as mentioned above) has adopted restrictions in telecommunications. Burkina Faso has imposed restrictive requirements for health data.Footnote 181

At the continental level, the Digital Transformation Strategy adopts a pro-data localisation stance. It considers the adoption of these measures a means to achieve self-sufficiency in the African data economy. It emphasises the narrative of digital/data colonialism, highlighting that most digital offerings consumed in Africa originate outside Africa and reiterating the need for regional data centres for a robust African data-driven economy. This instrument thus extols data localisation as a means of respecting data sovereignty and emphasises the urgent goal of the storage of the personal data of all African residents within Africa.Footnote 182 To facilitate this transition, the Digital Transformation Strategy explicitly recommends the adoption of a data localisation regulatory framework.Footnote 183

In contrast, the Data Policy Framework's approach to data localisation is moderate. It highlights that localisation rules limit the cross-border flow of information and thus weaken the data economy in Africa.Footnote 184 However, it also acknowledges that data localisation can be an ‘expression of state sovereignty’.Footnote 185 It thus advocates a cost–benefit analysis for data localisation measures, taking into account the context of the control measures, practical challenges (such as capacity constraints) and possible human rights violations.Footnote 186 This framework also recognises that policies like data localisation are not possible without the necessary infrastructure and institutional frameworks.Footnote 187 Moreover, it offers a more nuanced position, requiring cross-border provisions for cloud computing, data centres and data localisation to be contextualised to broader economic and development priorities.Footnote 188

The above policy divergences on data localisation possibly reflect the shifting ideological preferences within Africa. The Digital Transformation Strategy was launched in 2020 and the Data Policy Framework in 2022. The COVID-19 pandemic took place in the intervening period. It exposed Africa's vulnerabilities and African States realised that they were underprepared to adopt strict data localisation as the only viable policy option. Reflecting this change in policy thinking, Article 22.1 of the AfCFTA DTP expressly prohibits the adoption of data localisation measures by State Parties. It is qualified by an exception that allows State Parties to adopt such measures if necessary ‘to achieve a legitimate public policy objective or protect essential security interests’.Footnote 189 While prohibiting data localisation, the AfCFTA DTP has a unique provision that encourages State Parties to support the establishment and use of data centres in their territory to ‘promote the development of local digital infrastructure and access in line with the objectives of this Protocol’.Footnote 190 The negotiated compromise evident in this provision underlines that the dynamism and evolution of community values can allow for the reflection of practical realities while laying the groundwork for Africa's data sovereignty.

The AU centralises the AfCFTA as a forum for digital economy rulemaking to establish standardised rules on cross-border data flows. At the same time, other institutions in Africa, including RECs, are involved in deliberating upon policies and initiatives on digital transformation and growth at a Pan-African level. Regulating data flows entails looking at multiple dimensions of regulation. Therefore, by adopting a multi-institutional model of digital trade regulation and integration, the African community recognises the critical and unique role that different stakeholders must play in the community. This model also upholds the Ubuntu philosophy in which individual community members and their associated bodies have a sense of collective responsibility. Further, a natural consequence of this model is that different stakeholder bodies have a voice in setting the most appropriate rules for data flows in the region, contextualising their socio-economic needs and circumstances.

In creating African data standards, the Data Policy Framework further recognises another essential value in developing a strong community: consensus.Footnote 191 It highlights the necessity of developing data standards to facilitate cross-border data cooperation. However, in doing so, the relevant bodies should reference current international standards while adjusting and adapting them to Africa-specific needs.Footnote 192 These considerations can and should be integrated into the Annex on Cross-Border Data Transfers to create an African data transfer regime that is attuned to Africa's unique circumstances and priorities.

2. Emerging consensus on data protection and privacy

The relevance of privacy and data protection as an African value or policy priority is often debated.Footnote 193 For instance, it has been proposed that the collective nature of African culture, where individualism is subverted to the family, clan or community, can imply that individual freedoms like privacy are fundamentally antithetical to the African way of being. Moreover, several scholars have argued that the absence of any reference to privacy in the African Charter on Human and Peoples’ Rights (AfCHPR)Footnote 194 reflects the lack of a privacy culture in Africa.Footnote 195 However, international values like freedom and privacy have found their way into the constitutions of African States and/or their domestic laws as part of their colonial inheritance and engagement in international relations.Footnote 196 Further, scholars have recently argued that privacy values can be read into the AfCHPR.Footnote 197

In addition to legal arguments and the fact that communitarian values are predominant in Africa, there are pragmatic reasons to incorporate privacy norms in the African regional context to address changes in the digital world. In 2004, Bakibinga asserted that ‘[o]ne can have privacy and still be part of the community’.Footnote 198 Her statement is emphatically supported by Banisar, who has argued that privacy is inextricably linked to information technologies and, thus ‘differences in cultural understanding’ must not be overstated in the context of digital privacy.Footnote 199

The legal reality is that privacy and data protection are fait accompli in Africa—at the continental, REC and individual-State levels. Data protection is widely regulated in Africa. Pursuant to Article 21 of the AfCFTA DTP, State Parties are required to adopt or maintain a data protection regulatory framework.Footnote 200 To operationalise this framework, the State Parties have invoked the spirit of community/Ubuntu and seek to ‘develop collaboration mechanisms and frameworks for technical assistance, enforcement, and awareness creation on personal data protection’ and ‘maintain dialogue on personal data protection and sharing of knowledge, research and best practices with other State Parties’.Footnote 201 These elements could be developed in the Annex on Cross-Border Data Transfers to ensure that data flows with security and trust within Africa.

At the continental level, the African Union Convention on Cyber Security and Personal Data Protection 2014 (Malabo Convention) sets out a framework for data protection and seeks to establish an intra-African data transfer regulatory framework.Footnote 202 Its entry into force on 8 June 2023, nine years after its signature, was a significant milestone and symbolises how multiple stakeholders successfully rallied around a single policy objective. Although dated,Footnote 203 African States have been encouraged to ratify it over the years,Footnote 204 and it is widely referenced in continental policy documents.Footnote 205 The Malabo Convention establishes an African conditional flow regime under Article 14(6), which only permits the transfer of data to non-AU Member States if they have ‘an adequate level of protection of the privacy, freedoms and fundamental rights of persons’, unless the data controller obtains authorisation from the national Data Protection Authority (DPA). It is likely that this provision would even facilitate cross-border data transfers to AU Member States who have not ratified the Malabo Convention.

In addition to the Malabo Convention, privacy protection and related policy interests are also articulated in other sub-regional instruments and thus enjoy a high level of community-level support. For instance, the East African Community (EAC) was the first REC to adopt an instrument to regulate the digital economy, with the adoption of the EAC Framework for Cyberlaws in 2010.Footnote 206 This instrument also recommended further work, inter alia, on designing institutional and legislative measures for protecting internet privacy in Africa, including by taking account of international best practices.Footnote 207

Further, the Member States of the Economic Commission of West African States (ECOWAS) have adopted the ECOWAS Supplementary Act on Personal Data Protection (ECOWAS Supplementary Act).Footnote 208 It applies to, inter alia, data processing carried out within ECOWAS and the West African Economic and Monetary Union (WAEMU). The ECOWAS Supplementary Act requires data processors in the region to make declarations and authorisations to process certain types of data, including personal data like biometric data, health information and criminal records.Footnote 209 Further, like the Malabo Convention, Article 36 of the ECOWAS Supplementary Act permits the transfer of personal data to non-ECOWAS States upon fulfilling adequacy requirements. In March 2023, the ECOWAS Court found the ECOWAS Supplementary Act to be a human rights instrument protecting privacy and personal data.Footnote 210

Finally, the Southern African Development Community (SADC) has issued a Model Law on Data Protection, which was adopted by the ministers responsible for telecommunications, postal, and information and communications technology (ICT) services in 2012.Footnote 211 Regarding data flows to non-SADC members, Article 44 provides a mechanism for the flow of personal data inter alia, upon the consent of the data subject or to fulfil contractual obligations between the data controller and a third party. Although it is not binding on the parties, its principles have nevertheless been adopted into sub-regional national privacy laws.

Moreover, individual African States have been particularly prolific at adopting data protection regulations. United Nations Trade and Development (UNCTAD) indicates that of the 54 African States included in its database, currently 33 (or 61 per cent) have data protection legislation, 6 (or 11 per cent) have draft legislation, 10 (or 19 per cent) have no legislation, and there are no data on 5 States (9 per cent).Footnote 212 Additionally, contributing to the complex landscape of data protection laws applicable to African States, Cabo Verde, Mauritius, Morocco, Senegal and Tunisia have ratified the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (Convention 108).Footnote 213

There is a clear expression of data protection as a community value in Africa, but how this will be realised at the continental level is unclear, especially given the degree of regulatory heterogeneity. Therefore, focusing on shared values to foster creative cooperation is necessary to ensure that data flows with trust and security in Africa. A common feature of many domestic African data protection laws is the adoption of the adequacy/conditional flow regime of the Data Protection (General) Regulations (GDPR).Footnote 214 This allows data transfers to a third country, provided they have an ‘adequate’ level of data protection. For example, Articles 48, 49 and 50 of the Kenya Data Protection ActFootnote 215 permit the cross-border transfer of data if adequate protection exists, or if the data subject has consented, or the transfer is necessary for a contract, or required in the public interest. Other States like Chad,Footnote 216 Senegal,Footnote 217 South Africa,Footnote 218 Tunisia,Footnote 219 UgandaFootnote 220 and ZimbabweFootnote 221 have adopted a similar approach to data protection.

Individual African domestic adequacy regimes can frustrate the goal of establishing a Digital Single Market and splinter the community. Moreover, the AfCFTA DTP has not rectified the uncertainty by providing a clear benchmark. It merely requires the State Parties to adopt or maintain data protection regulations without providing further guidance. It nonetheless seeks to ensure regulatory best practices and to encourage some harmonisation by requiring State Parties to consider ‘the relevant principles and guidelines adopted by regional, continental and international organisations’Footnote 222 when adopting their data protection instruments.

To foster the collective will of the African community to build a regional data protection framework, a pragmatic direction is necessary that addresses policy confusion among State parties. The Annex on Cross-Border Data Transfers presents a significant opportunity to ensure that personal data will be protected in every African jurisdiction. One option is for African States to converge around the adequacy/conditional flow data protection model, allowing for State-specific differences in the form of flexible harmonisation. All AfCFTA State Parties would agree to grant each other adequacy and would also follow the same conditional flow/adequacy model when transferring African data to third-party States so as not to erode the higher levels of protection agreed upon within the AfCFTA DTP. This model could be operationalised by ensuring that national and continental DPAs are adequately resourced, and an Africa-wide agency could be identified for further support, monitoring and evaluation (thus strengthening the provisions of the Protocol discussed in the previous paragraph). In addition to building a strong digital trade community aligned with African values, this would provide African entities trading outside of Africa with an additional layer of legitimacy and trustworthiness. These changes could be highly relevant given the absence of trust in data protection and cybersecurity environments in individual African States.

Another arguably more Africa-attuned data protection model has been proposed in the AU Data Policy Framework. It recognises that some models of data protection widely used elsewhere, like informed consent, may not work in Africa because of low levels of literacy, including digital illiteracy. Granting access to personal data by ticking a box after reading a long text may not be representative of proper consent in the African context. The Framework proposes other means of data stewardship, such as data trusts, to ensure that the rights of the public are upheld. The Framework also recognises that the framing of data protection with individual privacy may not always be adequate in Africa because of community and collective rights that might be just as important to protect as the individual right to privacy. It thus proposes framing data protection as data justice (which also includes cybersecurity, the rule of law and institutional accountability).Footnote 223 This is a clear example of developing African digital economy regulation through a community lens and elevating collective rights over individual rights that symbolises the concept of Ubuntu. This model of protecting collective rights in digital trade regulation is not unique to Africa. New Zealand has recognised the collective rights of the Maōri, including data protection, in its PTAs to fulfil its obligations under the Treaty of Waitangi.Footnote 224

3. Towards a community model of cybersecurity regulation

Although digital interdependence has its benefits, the ever-growing dependence on information technology also creates vulnerability related to cyber-attacks and cybercrime.Footnote 225 This situation is even more severe in Africa, where 90 per cent of businesses operate without the necessary cybersecurity protocols, resulting in significant financial loss if targeted.

In 2021, cybercrime reduced Africa's GDP by 10 per cent, or approximately US$4.12 billion. In 2016, cybercrime cost the Kenyan economy approximately US$36 million, the Nigerian economy US$500 million, and the South African economy US$573 million. South Africa has the third-highest number of cybercrime victims per year in the world and is the most affected African State. The COVID-19 pandemic further accelerated cybercrime, exacerbating the digital divide and cybersecurity vulnerabilities across the region. The growing rate of digital transformation in Africa continually facilitates the emergence of new cyber-attack vectors and opportunities for cybercriminals.Footnote 226 To manage the risks and losses associated with cyber-criminality and to maximise the gains from the Digital Single Market, it is thus critical that African States collaborate to develop an effective cybersecurity regulatory framework.

On cybersecurity matters, the AfCFTA DTP requires State Parties to adopt or maintain measures to ensure cybersecurity and combat cybercrime. In doing so, State Parties must take into account standards and guidelines in relevant regional, continental and international instruments.Footnote 227 In operationalising this undertaking, State Parties reflect community values and the multistakeholder approach by endeavouring to: (i) build capacities of domestic authorities or bodies responsible for cybersecurity; (ii) develop collaboration mechanisms for technical assistance and capacity building with other State Parties; (iii) strengthen existing cybersecurity incident collaboration mechanisms with other State Parties; (iv) engage industry, civil society, academia and other stakeholders in matters of cybersecurity; and (v) exchange with each other and share best practices and information on cybersecurity issues.Footnote 228 Finally, State Parties must require their domestic enterprises to ‘identify and protect against cybersecurity risks and to detect, respond to, and recover from cybersecurity incidents’.Footnote 229

The Malabo Convention also establishes procedures for combatting cybercrime in Africa. Central to these provisions is Article 28 on international cooperation, which requires State Parties to adopt legislation or regulations on cybersecurity that will ‘strengthen the possibility of regional harmonization of these measures’, follow the principle of mutual assistance agreement in cybercrime, encourage the establishment of Computer Emergency Response Teams or Computer Security Incident Response Teams to exchange information on cyber-threats, and make use of existing means for international cooperation to strengthen cybersecurity. At the REC level, the EAC Framework for CyberlawsFootnote 230 and the ECOWAS Regional Cybersecurity and Cybercrime StrategyFootnote 231 include frameworks for addressing cybersecurity in the two sub-regions.

Domestically, African States have also been actively adopting legislation on cybersecurity. Of the 54 AU Member States included in UNCTAD's database, 39 (72 per cent) have legislation, 2 (4 per cent) have draft legislation, 12 (22 per cent) have no legislation, and there are no data on 1 State (2 per cent).Footnote 232 Countries like RwandaFootnote 233 and ZambiaFootnote 234 have adopted data localisation requirements to prevent cybercrimes. Moreover, Cabo Verde, Ghana, Mauritius, Morocco and Nigeria are partiesFootnote 235 to the Budapest Convention on Cybercrime and its Additional Protocols.Footnote 236

The AfCFTA DTP does not envisage a Cybersecurity annex. However, Article 29.2 contemplates the negotiation of an Annex on Online Safety and Security. The annex has the potential to cover cybersecurity and could incorporate some of the existing regulatory and policy frameworks that reflect the collective will and values of African State Parties on cybersecurity. For example, the Digital Transformation Strategy recommends the support of interventions to strengthen cybersecurity at the national level. This includes developing and adopting national cybersecurity strategies and laws and enabling policymakers and law enforcement to strengthen cybersecurity. The Data Policy Framework invokes Ubuntu to address cybersecurity in the African region. It contemplates a multistakeholder collaborative approach. This would include the establishment of an AU Cyber Security Strategy and Operational Cybersecurity Centres to mitigate common risks and threats related to cyberattacks, data breaches and the misuse of sensitive information. Enhanced cooperation amongst the AU Member States, other AU organs and the AU Mechanism for Police Cooperation (AFRIPOL) is also contemplated. Moreover, it is foreseen that AU Members would cooperate to develop cybersecurity standards and adopt a joint sanction regime for cyber-attacks.Footnote 237

The push to regulate cybersecurity collaboratively in Africa is already visible. The aim is to mitigate the potentially great losses suffered by victims of cybercrime, who are mostly among the vulnerable populations in Africa. However, the increasing regulatory fragmentation can undermine efforts to adopt rules on robust cooperation and capacity building that further nurture and support the growing digital community to address the rampant cyber-insecurity in Africa.

The above discussion on cross-border data flows, data protection and cybersecurity indicates that community values, as embodied in the African philosophy of Ubuntu, have been significantly integrated into efforts to regulate the digital economy. This is despite cross-border data regulation being one of the most complex policy areas in digital trade regulation. Although most existing initiatives are soft-law instruments and flexible policy frameworks, they present considerable opportunities for the African region to emerge as a cohesive and robust digital trade community. Soft law has the advantage of being an alternative means of ensuring community and solidarity in Africa without the risk of legal challenges if a State Party cannot comply due to domestic incapacity and other constraints. It has also permitted the values of multistakeholderism and consensus to be incorporated into certain initiatives. The negotiation of the Annex on Cross-Border Data Flows will provide another opportunity for the continent to create novel mechanisms and institutional bodies that can identify common interests and foster meaningful cooperation in these areas by relying upon the core values of the African digital trade community.

V. CONCLUSION

This article sets out the importance of shared values and emerging solidarity in digital trade communities for building and implementing a robust and sustainable framework for digital trade law. While the notion of community values may seem vague at first sight, this article argues its malleability is crucial for States seeking an anchor to develop an inclusive and holistic model of digital trade integration. Similarly, although solidarity has often been a contested legal concept, it can provide direction for the development of relevant regulatory cooperation and technical assistance and support mechanisms in digital trade law. In addition, specific to the African context, the article highlights how community interest may be further strengthened in the African digital market by relying upon the philosophy of Ubuntu in developing and implementing various digital economy frameworks in the region. The article then examines the possibility of building upon shared interests in this manner to foster regulation of cross-border data flows, data protection and cybersecurity under Africa's digital economy regulatory framework, including the AfCFTA DTP.

Ultimately, whether in the context of Africa, other regions or even the WTO, the development or strengthening of a viable digital trade community (or communities) will prevent governments from the slippery slope of digital sovereignty and protectionism which hampers global and domestic economic welfare.Footnote 238 Emerging digital trade communities can thus become fora for meaningful deliberation on transnational digital policy concerns and could be especially critical in designing the institutional and policy interventions necessary to operationalise shared values and collective interests in the global digital economy. It is thus concluded that for the development of both rules and institutions in digital trade law, trade policymakers must continue to identify and strengthen commonly shared values to provide a solid foundation for the regulation of the global digital economy.

ACKNOWLEDGEMENTS

The authors thank Mira Burri, participants in the African International Economic Law Biennial Conference 2023, participants of the Conference on the International Community held in Johannesburg in 2022, the editorial board of the International and Comparative Law Quarterly and two anonymous reviewers for their insightful feedback on previous versions of this article.

References

1 Broadly, ‘[d]igital trade refers to commerce enabled by electronic means – by telecommunications and/or ICT [information and communications technology] services – and covers trade in both goods and services’. There is no universally accepted definition of digital trade. See European Commission, ‘Digital Trade’ <https://policy.trade.ec.europa.eu/help-exporters-and-importers/accessing-markets/goods-and-services/digital-trade_en>.

2 See generally Bradford, A, Digital Empires: The Global Battle to Regulate Technology (OUP 2023)CrossRefGoogle Scholar.

3 See, eg, D Dupont, ‘U.S. to End Support for WTO E-Commerce Proposals, Wants “Policy Space” for Digital Trade Rethink’ (Inside Trade, 24 October 2023) <https://insidetrade.com/daily-news/us-end-support-wto-e-commerce-proposals-wants-policy-space-digital-trade-rethink>; Press Trust of India, ‘India Pitches for Clear Definition of E-Commerce Trade in Goods, Services in WTO’ (The Economic Times, 30 October 2023) <https://retail.economictimes.indiatimes.com/news/e-commerce/e-tailing/india-pitches-for-clear-definition-of-e-commerce-trade-in-goods-services-in-wto/104817529?redirect=1>; World Trade Organization (WTO), ‘Work Programme on Electronic Commerce the Moratorium on Customs Duties on Electronic Transmissions: Need for Clarity on its Scope and Impact’ (8 November 2021) UN Doc WT/GC/W/833.

4 ‘Data Beyond Borders 3.0: Bridging the Digital Divide’ (Salesforce, 2023) 7 <https://www.salesforce.com/content/dam/web/en_au/www/documents/pdf/data_beyond_borders.pdf>.

5 N Cory and S Sacks, ‘China Gains as U.S. Abandons Digital Policy Negotiations’ (Lawfare, 15 November 2023) <https://www.lawfaremedia.org/article/china-gains-as-u.s.-abandons-digital-policy-negotiations>.

6 Chander, A and Sun, H, ‘Sovereignty 2.0’ (2021) Georgetown Law Faculty Publications and Other Works 2404Google Scholar.

7 Such measures range from explicit data localisation measures to extensive compliance requirements for foreign technology companies in various domestic laws and regulations, resulting in various barriers to digital trade. See, eg, J López González, F Casalini and J Porras, ‘A Preliminary Mapping of Data Localisation Measures’, OECD Trade Policy Paper No 262 (Organisation for Economic Co-operation and Development 2022); N Cory and L Dascoli, ‘How Barriers to Cross-Border Data Flows Are Spreading Globally, What They Cost, and How to Address Them’ (ITIF, 19 July 2021) <https://itif.org/publications/2021/07/19/how-barriers-cross-border-data-flows-are-spreading-globally-what-they-cost/>.

8 United Nations Trade and Development (UNCTAD), ‘Digital Economy Report 2021 – Cross-Border Data Flows and Development: For Whom the Data Flow’ (2021) UN Doc UNCTAD/DER/2021, 122–3.

9 Evenett, SJ and Fritz, J, Emergent Digital Fragmentation: The Perils of Unilateralism (CEPR Press 2022)Google Scholar.

10 Burri, M and Chander, A, ‘What Are Digital Trade and Digital Trade Law?’ (2023) 117 AJIL Unbound 99CrossRefGoogle Scholar.

11 Internet Governance Forum, ‘Can Digital Economy Agreements Limit Internet Fragmentation’ (YouTube, 8 October 2023) <https://www.youtube.com/watch?v=WVSHeyFJ--Y> (Comments of Bill Drake, Marta Soprana and Neha Mishra).

12 Protocol to the Agreement Establishing the African Continental Free Trade Area on Digital Trade, Ninth Extraordinary Session of the Specialised Committee on Justice and Legal Affairs (7–10 February 2024) Durban (South Africa) (AfCFTA DTP).

13 Simma, B and Paulus, AL, ‘The “International Community”: Facing the Challenge of Globalization’ (1998) 9(2) EJIL 267CrossRefGoogle Scholar.

14 K Yester, ‘What Is the International Community?’ (Foreign Policy, 9 November 2009) <https://foreignpolicy.com/2009/11/09/what-is-the-international-community/>.

15 Jackson, JH, Sovereignty, the WTO, and Changing Fundamentals of International Law (CUP 2011) 36Google Scholar (arguing that State consent is seen as the bedrock of international law).

16 See, eg, Barcelona Traction, Light and Power Company, Limited (Belgium v Spain) (New Application: 1962) (Second Phase) [1970] ICJ Rep 3, paras 33–34.

17 Rao, PS, ‘The Concept of “International Community” in International Law and the Developing Countries’ in Fastenrath, U et al (eds), From Bilateralism to Community Interest: Essays in Honour of Judge Bruno Simma (OUP 2011) 326–338Google Scholar.

18 Simma and Paulus (n 13) 268.

19 J Rudall, Altruism in International Law (CUP 2021) 57, outlining how different actors shape globalisation of international law. See also E Benvenisti and G Nolte, ‘Introduction’ in E Benvenisti and G Nolte (eds), Community Interests Across International Law (OUP 2018).

20 M Mitrani, ‘Demarcating the International Community: Where Do International Practices Come From?’ in L Biukovic and PB Potter (eds), Local Engagement with International Economic Law and Human Rights (Edward Elgar 2017) 141.

21 Author Notes of discussions from the Conference on the International Community, held in South Africa, October 2022 (on file with author).

22 Simma, B, ‘From Bilateralism to Community Interest in International Law’ (1994) 250 RdC 217, 246Google Scholar.

23 See generally Scott, JB, ‘The Individual, the State, the International Community’ (1930) 24 Proceedings of the American Society of International Law at its Annual Meeting (1921–1969) 15Google Scholar.

24 See for instance Charter of the United Nations (adopted 26 June 1945, entered into force 24 October 1945) 1 UNTS XVI, arts 1, 55, 56 (outlining high-level community values furthering the objectives of the UN Charter).

25 See generally Simma (n 22) 217. Some scholars are sceptical whether the International Court of Justice actually provides normative content to the ‘international community’. See Hernández, GI, ‘A Reluctant Guardian: The International Court of Justice and the Concept of “International Community”’ (2013) 83(1) BYIL 13Google Scholar.

26 Hakimi, M, ‘Constructing an International Community’ (2017) 111(2) AJIL 318CrossRefGoogle Scholar.

27 Mitrani (n 20) 128.

28 Simma (n 22) 217.

29 ibid 234.

30 R Wolfrum, ‘Enforcing Community Interests through International Dispute Settlement: Reality or Utopia?’ in Fastenrath et al (n 17) 1132.

31 Mitrani (n 20) 135.

32 Rudall (n 19) 60.

33 Hakimi (n 26) 332.

34 ibid 318–19.

35 See generally Abi-Saab, G, ‘Whither the International Community?’ (1998) 9(2) EJIL 248CrossRefGoogle Scholar.

36 See generally P-M Dupuy, ‘From a Community of States towards a Universal Community?’ in RP Mazzeschi and P De Sena (eds), Global Justice, Human Rights and the Modernization of International Law (Springer 2018).

37 ibid 48.

38 Mitrani (n 20) 141.

39 U Özsu, ‘“Let Us First of All Have Unity among Us”: Bandung, International Law, and the Empty Politics of Solidarity’ in L Eslava, M Fakhri and V Nesiah (eds), Bandung, Global History, and International Law: Critical Pasts and Pending Futures (CUP 2017).

40 See generally K Gorobets, ‘Solidarity as a Practical Reason: Grounding the Authority of International Law’ (2022) European Society of International Law (ESIL) Paper 2022/02.

41 UNHRC, ‘Revised Draft Declaration on the Human Rights and International Solidarity: Report of the Independent Expert on Human Rights and International Solidarity, Obiora Chinedu Okafor’ (2 May 2023) UN Doc A/HRC/53/32, art 1(1) (Revised Draft Declaration on Human Rights and International Solidarity). In a previous version, solidarity was characterised as a ‘foundational principle’ in international law ‘to preserve the international order and to ensure the survival of international society’. UNHRC, ‘Draft Declaration on International Solidarity: Report of the Independent Expert on Human Rights and International Solidarity’ (25 April 2017) UN Doc A/HRC/35/35, art 1(2).

42 Revised Draft Declaration on Human Rights and International Solidarity (n 41) arts 4, 5, 6.

43 ibid, art 3.

44 ibid, art 7.

45 See generally R Wolfrum and C Kojima (eds), Solidarity: A Structural Principle of International Law (Springer 2010); MacDonald, RSJ, ‘Solidarity in the Practice and Discourse of Public International Law’ (1996) 8 PaceIntlLRev 259, 262Google Scholar.

46 MacDonald ibid 259–60; Rudall (n 19) 5, 9; Williams, A, ‘Solidarity, Justice and Climate Change Law’ (2009) 10 MJIL 503Google Scholar.

47 D Tladi, ‘In Search of Solidarity in International Law’ in E Kassoti and N Idriz (eds), The Principle of Solidarity: International and EU Law Perspectives (T.M.C. Asser Press 2023). For the difference between self-centred and altruistic solidarity, see Rudall ibid 30, 175.

48 Rudall ibid 30.

49 HP Hestermeyer, ‘Reality or Aspiration? Solidarity in International Environmental and World Trade Law’ in HP Hestermeyer et al (eds), Coexistence, Cooperation and Solidarity: Liber Amicorum Rüdiger Wolfrum (Martinus Nijhoff 2012) vol 1, 45.

50 See, eg, Pauwelyn, JHB, ‘A Typology of Multilateral Treaty Obligations: Are WTO Obligations Bilateral or Collective in Nature?’ (2003) 14(5) EJIL 907CrossRefGoogle Scholar; Jackson (n 15) 237.

51 C Tietje and A Lang, ‘Community Interests in World Trade Law’ in M Iovane et al (eds), The Protection of General Interests in Contemporary International Law: A Theoretical and Empirical Inquiry (OUP 2021) 197.

52 Jackson (n 15) 60.

53 While this article does not discuss this further, certain scholars argue that the constitution of the New International Economic Order in the 1970s under the aegis of the UNCTAD reflected the principle of solidarity. See Rudall (n 19) 163.

54 Final Act of the United Nations Conference on Trade and Employment (adopted 24 March 1948) UN Doc E/CONF.2/78 (Havana Charter) art 1.6 (emphasis added).

55 See for instance WTO, ‘World Trade Report 2023: Re-Globalization for a Secure, Inclusive and Sustainable Future’ (2023) <https://www.wto.org/english/res_e/booksp_e/wtr23_e/wtr23_e.pdf>.

56 Jackson (n 15) 66.

58 WTO, ‘MC12 Opening Session: Opening Remarks by the Director-General’ (12 June 2022) <https://www.wto.org/english/news_e/spno_e/spno26_e.htm> (emphasis added).

59 Marrakesh Agreement Establishing the World Trade Organization (adopted 15 April 1994, entered into force 1 January 1995) 1867 UNTS 154 (WTO Agreement) preamble, recital 1.

60 ibid, recital 2.

61 ibid, recital 3.

62 Jackson (n 15) 82, 85, 86.

63 See generally Tietje and Lang (n 51).

64 For a parallel argument in international investment law, see SW Schill and V Djanic, ‘International Investment Law and Community Interests’ in Benvenisti and Nolte (n 19).

65 R Wolfrum, ‘Concluding Remarks’ in Wolfrum and Kojima (n 45).

66 Jackson (n 15) 230–1.

67 ibid 235–6.

68 WTO, ‘Sustainable Development’ <https://www.wto.org/english/tratop_e/envir_e/sust_dev_e.htm>; WTO, ‘Environmental Disputes in GATT/WTO’ <https://www.wto.org/english/tratop_e/envir_e/edis00_e.htm>.

69 Panels and the AB have applied the principle of evolutionary interpretation in a range of trade disputes to read in various policy objectives into existing provisions of WTO law. See, eg, AB Report, ‘United States – Measures Affecting the Cross-Border Supply of Gambling and Betting Services’ (adopted 20 April 2005) WT/DS285/AB/R, paras 162–208; AB Report, ‘United States – Import Prohibition of Certain Shrimp and Shrimp Products’ (adopted 6 November 1998) WT/DS58/AB/R, para 131; AB Report, ‘China – Measures Affecting Trading Rights and Distribution Services for Certain Publications and Audiovisual Entertainment Products’ (adopted 19 January 2010) WT/DS363/AB/R, paras 395–396.

70 See, eg, General Agreement on Trade in Services, in Marrakesh Agreement Establishing the World Trade Organization, Annex 1B (adopted 15 April 1994, entered into force 1 January 1995) 1869 UNTS 183 (GATS) art XIV.

71 T Cottier, ‘International Trade, Human Rights and Policy Space’ in L Biukovic and PB Potter (eds), Local Engagement with International Economic Law and Human Rights (Edward Elgar 2017) 10.

72 See generally UNCTAD, ‘Trade and Development Report 2018’ (2018) UN Doc UNCTAD/TDR/2018; M Kumar, ‘Towards a WTO Anchored in SDGs’ (South Centre 2023).

73 WTO Secretariat (Committee on Trade and Development), ‘Special and Differential Treatment Provisions in WTO Agreements and Decisions’ (16 March 2023) WT/COMTD/W/271, para 1.5.

74 Tietje and Lang (n 51); Hestermeyer (n 49) 52.

75 WTO Secretariat (n 73).

76 See generally J Bacchus and I Manak, The Development Dimension: Special and Differential Treatment in Trade (Routledge 2021); Sauvé, P, ‘Special and Differential Treatment as If It Could Be Reformed’ (2022) 56(6) JWT 879Google Scholar.

77 PK Goldberg, ‘Why Have Developing Countries Soured on Multilateralism?’ (Project Syndicate, 19 March 2024) <https://www.project-syndicate.org/commentary/multilateralism-wto-in-crisis-when-developing-countries-dont-see-the-benefits-by-pinelopi-koujianou-goldberg-2024-03>.

78 See generally Ukpe, A and Khorana, S, ‘Special and Differential Treatment in the WTO: Framing Differential Treatment to Achieve (Real) Development’ (2023) 20 JITL&P 83Google Scholar.

79 WTO Agreement (n 59) art IX:1.

80 See generally Hakimi (n 26).

81 Simma and Paulus (n 13) 272.

82 Hakimi (n 26) 322.

83 WTO, ‘COVID-19 and World Trade’ <https://www.wto.org/english/tratop_e/covid19_e/covid19_e.htm>.

84 ibid.

85 WTO, ‘Statement on a Mechanism for Developing, Documenting and Sharing Practices and Procedures in the Conduct of WTO Disputes: Addendum’ (30 April 2020) JOB/DSB/1/Add.12.

86 WTO, ‘Global Supply Chains Forum – Easing Supply Chain Bottlenecks for a Sustainable Future’ (2022).

87 Cohen, HG, ‘What is International Trade Law for?’ (2019) 113 AJIL 327CrossRefGoogle Scholar.

88 See, eg, ASEAN Telecommunications and Information Technology Ministers Meeting (TELMIN) Framework on Personal Data Protection (adopted 25 November 2016); RC Castellanos, ‘The Pacific Alliance Towards a Strategy on Digital Economy?’ (2020) 13 AnColombianoDerIntern 165; African Union Convention on Cyber Security and Personal Data Protection (adopted 27 June 2014, entered into force 8 June 2023) (Malabo Convention).

89 See, eg, The White House, ‘A Declaration for the Future of the Internet’ (The White House, 2022) <https://www.whitehouse.gov/wp-content/uploads/2022/04/Declaration-for-the-Future-for-the-Internet_Launch-Event-Signing-Version_FINAL.pdf>; European Commission, ‘EU–India: New Trade and Technology Council to Lead on Digital Transformation, Green Technologies and Trade’ (6 February 2023) <https://digital-strategy.ec.europa.eu/en/news/eu-india-new-trade-and-technology-council-lead-digital-transformation-green-technologies-and-trade>; Commission Nationale de contrôle de la protection des Données à caractère Personnel – Morocco, ‘Digital Economy Working Group Report’ (Global Privacy Assembly, September 2022) <https://globalprivacyassembly.org/wp-content/uploads/2022/11/2.2.c.-Digital-Economy-Working-Group-English.pdf>.

90 See generally Chander and Sun (n 6).

91 OECD, ‘Economic and Social Benefits of Internet Openness: 2016 Ministerial Meeting on the Digital Economy – Background Report’ (2 June 2016) DSTI/ICCP/(2015)17/FINAL.

92 Chander and Sun (n 6).

93 For an overview of different models of data regulation, see UNCTAD (n 8) Ch IVB.

94 M Burri, MV Callo-Müller and K Kugler, ‘TAPED: A Dataset on Digital Trade Provisions’ <https://www.unilu.ch/en/faculties/faculty-of-law/professorships/burri-mira/research/taped/> (University of Lucerne, TAPED dataset, version 2 November 2023). The dataset categorises all provisions in the e-commerce chapters of PTAs based on the language of the provisions and its degree of bindingness on parties as ‘soft’ and ‘binding’.

95 Values taken from the TAPED dataset, ibid.

96 ibid.

97 These commitments have been undertaken by developing countries and select developed countries like the UK, Australia, Japan, Singapore and New Zealand in regional PTAs like the Comprehensive and Progressive Agreement for Trans-Pacific Partnership (CPTPP), Regional Comprehensive Economic Partnership (RCEP), Pacific Alliance Additional Protocol, United States–Mexico–Canada Agreement (USMCA) and Mercosur (Mercado Común del Sur).

98 Values taken from the TAPED dataset (n 94).

99 Burri, M, ‘Cross-border Data Flows and Privacy in Global Trade Law: Has Trade Trumped Data Protection?’ (2023) 39(1) OxfRevEconPolicy 85Google Scholar.

100 Agreement between the United States of America, the United Mexican States, and Canada (10 December 2019) (USMCA) art 19.8.

101 Regional Comprehensive Economic Partnership (15 November 2020) (RCEP) Section D.

102 Digital Economy Partnership Agreement (registration date 1 October 2022) Reg No 57541 (DEPA).

103 K Wong, ‘China's Asia–Pacific Trade Deal, Digital Economy Pact Aspirations Backed by New Zealand’ (SCMP, 28 June 2023) <https://www.scmp.com/economy/global-economy/article/3225781/chinas-asia-pacific-trade-deal-digital-economy-pact-aspirations-backed-new-zealand>; Comprehensive and Progressive Agreement for Trans-Pacific Partnership (concluded 8 March 2018, entered into force 8 March 2048, registered 1 December 2019) 3337 UNTS.

104 D Lawder, ‘US Drops Digital Trade Demands at WTO to Allow Room for Stronger Tech Regulation’ (Reuters, 26 October 2023) <https://www.reuters.com/world/us/us-drops-digital-trade-demands-wto-allow-room-stronger-tech-regulation-2023-10-25/>.

105 M Chorzempa and S Sacks, ‘China's New Rules on Data Flows Could Signal a Shift away from Security toward Growth’ (PIIE Blog, 3 October 2023) <https://www.piie.com/blogs/realtime-economics/chinas-new-rules-data-flows-could-signal-shift-away-security-toward-growth>.

106 ASEAN Secretariat, ‘ASEAN Digital Masterplan 2025’ (2021) <https://asean.org/wp-content/uploads/2021/09/ASEAN-Digital-Masterplan-EDITED.pdf>.

107 ASEAN, ‘ASEAN Agreement on Electronic Commerce Officially Enters into Force’ (3 December 2021) <https://asean.org/asean-agreement-on-electronic-commerce-officially-enters-into-force/>.

108 ASEAN Telecommunications and Information Technology Ministers Meeting (TELMIN) Framework on Digital Data Governance (adopted 6 December 2018).

109 ASEAN, ‘ASEAN Digital Integration Framework’ (2019).

110 ASEAN Digital Senior Officials’ Meeting, ‘ASEAN Model Contractual Clauses for Cross Border Data Flows’ (2021).

111 M Sefrina, ‘Understanding the ASEAN Digital Economy Framework Agreement: A Means to Support ASEAN Integration’ (2023) Economic Research Institute for ASEAN and East Asia Policy Brief No 2023-01.

112 For a list of adopted resolutions, see Global Privacy Assembly, ‘Adopted Resolutions’ <https://globalprivacyassembly.org/document-archive/adopted-resolutions/>.

113 Internet Society, ‘Protecting the Internet Against Fragmentation’ <https://www.internetsociety.org/action-plan/protecting-the-internet-against-fragmentation/>.

114 See, eg, UNESCO, ‘UNESCO Stands Strong for Protecting Data and Privacy’ (20 April 2023) <https://www.unesco.org/en/articles/unesco-stands-strong-protecting-data-and-privacy>.

115 Internet & Jurisdiction Policy Network, ‘Internet & Jurisdiction Policy Network: Enabling Multistakeholder Cooperation’ <https://www.internetjurisdiction.net/>.

116 Datasphere Initiative <https://www.thedatasphere.org/>.

117 See, eg, DEPA (n 102) module 11.

118 Digital Agency, ‘Data Free Flow with Trust (DFFT)’ <https://www.digital.go.jp/en/dfft-en/>.

119 An example could be how internet technical communities were able to build technical protocols for the internet using ‘rough consensus and running code’ as their political and cultural ethos. IETF, ‘Hackathons’ <https://www.ietf.org/runningcode/>.

120 See, eg, UN, Office of the Secretary-General's Envoy on Technology, ‘Global Digital Compact’ <https://www.un.org/techenvoy/global-digital-compact>.

121 See, eg, OECD, ‘Data Portability, Interoperability and Competition – Note by India’ (9 June 2021) DAF/COMP/WD(2021)31; J Hoffmann and BG Otero, ‘Demystifying the Role of Data Interoperability in the Access and Sharing Debate’ (2020) 11 JIPITEC 252; V Fernandes, ‘Towards Data Portability and Interoperability under Brazilian Competition Law: Crafting Appropriate Legal Standards for Abuse of Dominance’ (Competition Policy International, 20 December 2022) <https://www.pymnts.com/cpi_posts/towards-data-portability-and-interoperability-under-brazilian-competition-law-crafting-appropriate-legal-standards-for-abuse-of-dominance/>.

122 OECD AI, ‘OECD AI Principles Overview’ <https://oecd.ai/en/ai-principles>.

123 See, eg, United Nations High Commissioner for Refugees (UNHCR), ‘Press Release: World Bank–UNHCR Data Sharing Agreement to Improve Assistance to the Forcibly Displaced’ (27 June 2023) <https://www.unhcr.org/news/press-releases/world-bank-unhcr-data-sharing-agreement-improve-assistance-forcibly-displaced>; UN Global Pulse <https://www.unglobalpulse.org/>.

124 European Data Protection Supervisor, ‘A New United Nations Convention on Cybercrime: Fundamental Rights Come First’ (20 May 2022) <https://edps.europa.eu/press-publications/press-news/press-releases/2022/new-united-nations-convention-cybercrime_en>; K Rodriguez and M Baghdasaryan, ‘UN Committee to Begin Negotiating New Cybercrime Treaty amid Disagreement among States over its Scope’ (Electronic Frontier Foundation, 15 February 2022) <https://www.eff.org/deeplinks/2022/02/un-committee-begin-negotiating-new-cybercrime-treaty-amid-disagreement-among>.

125 Ministry of Economy, Trade and Industry (METI), ‘Basic Economic Knowledge: The Indo-Pacific Economic Framework (IPEF), a New Framework for Economic Collaboration’ (7 November 2022) <https://www.meti.go.jp/english/mobile/2022/20221107001en.html>.

126 Z Yunling, ‘China and the Regional Comprehensive Economic Partnership: An Economic and Political Perspective’ (2022) Economic Research Institute for ASEAN and East Asia Discussion Paper Series No 434.

127 Metz, T, ‘Ubuntu as a Moral Theory and Human Rights in South Africa’ (2011) 11(2) AHRLJ 532, 533Google Scholar.

128 MF Murove, ‘Ubuntu’ (2014) 59(3–4) Diogenes 36.

129 Kamwangamalu, NM, ‘Ubuntu in South Africa: A Sociolinguistic Perspective to a Pan-African Concept’ (1999) 13(2) CritArts 24, 25Google Scholar.

130 See Gade, CBN, ‘What is Ubuntu? Different Interpretations among South Africans of African Descent’ (2012) 31(3) SAfrJPhil 488Google Scholar.

131 MB Ramose, ‘Ubuntu: Affirming a Right and Seeking Remedies in South Africa’ in L Praeg and S Magadla (eds), Ubuntu: Curating the Archive (University of KwaZulu-Natal Press 2014) 121. See also T Metz, ‘An African Egalitarianism: Bringing Community to Bear on Equality’ in G Hull (ed), The Equal Society: Essays on Equality in Theory and Practice (Lexington Books 2015); N Wathiong'o, Moving the Centre: The Struggle for Cultural Freedoms (James Currey 1993) 25.

132 Chengeta, T, ‘Dignity, Ubuntu, Humanity and Autonomous Weapon Systems (AWS) Debate: An African Perspective’ (2016) 13(2) BrazJIntlL 461Google Scholar.

133 See Molefe, M, ‘Ubuntu and Development: An African Conception of Development’ (2019) 66(1) AfrToday 97, 99103Google Scholar, referring to Metz, T, ‘Toward an African Moral Theory’ (2007) 15(3) JPolPhil 321Google Scholar; Metz, T, ‘Ubuntu as a Moral Theory: Reply to Four Critics’ (2007) 24 SAfrJPhil 369Google Scholar; Metz (n 127); Metz, T, ‘An African Theory of Moral Status: A Relational Alternative to Individualism and Holism’ (2012) 15 ETMP 387Google Scholar; D Tutu, No Future Without Forgiveness (Random House 1999).

134 See generally Gade (n 130) 488.

135 AB Makulilo, ‘The Context of Data Privacy in Africa’ in AB Makulilo (ed), African Data Privacy (Springer 2016) 11. For a history of literature on Ubuntu, see Gade (n 130).

136 Qobo, M and Nyathi, N, ‘Ubuntu, Public Policy Ethics and Tensions in South Africa's Foreign Policy’ (2016) 23(4) SAJIA 421, 422Google Scholar.

137 Murove (n 128) 42.

138 Qobo and Nyathi (n 136) 425.

139 ibid 421, 422, 424.

140 See Chengeta (n 132) 461–70.

141 ibid 472–4.

142 Department of International Relations and Cooperation (DIRCO), South Africa, ‘White Paper on South African Foreign Policy – Building a Better World: The Diplomacy of Ubuntu’ (2011) 4.

143 ibid 15.

144 See S v Makwanyane (1995) 6 BCLR 665 (CC) para 304. See also Dikoko v Mokhatla (2006) 6 SA 235 (CC) (on restorative justice); and Port Elizabeth Municipality v Various Occupiers (2005) (1) SA 217 (CC) para 37 (on the meaning of Ubuntu).

145 International Monetary Fund (IMF), ‘Is the African Continental Free Trade Area a Game Changer for the Continent?’ in IMF, Regional Economic Outlook: Sub-Saharan Africa, Recovery Amid Elevated Uncertainty (2019) 39 <https://www.imf.org/en/Publications/REO/SSA/Issues/2019/04/01/sreo0419>.

146 ibid 40.

147 Agreement Establishing the African Continental Free Trade Area (AfCFTA Agreement), 2019, art 23.

148 TRALAC, ‘Status of AfCFTA Ratification’ (13 August 2024) <https://www.tralac.org/resources/infographic/13795-status-of-afcfta-ratification.html> (as at the time of writing in August 2024).

149 See UN Economic Commission for Africa (UNECA), ‘Action Plan for Boosting Intra-Africa Trade’ (2012) <https://archive.uneca.org/pages/action-plan-boosting-intra-africa-trade>.

150 This part of the agreement has entered into force.

151 L Signé and C van de Ven, ‘Policy Brief: Keys to Success for the AfCFTA Negotiations’ (Africa Growth Initiative at Brookings, May 2019) 2–3 <https://www.brookings.edu/wp-content/uploads/2019/05/Keys_to_success_for_AfCFTA.pdf>.

152 AU, ‘Decision on the African Continental Free Trade Area (AfCFTA)’ (9–10 February 2020) Doc. Assembly/AU/4(XXXIII), Assembly/AU/Dec.751(XXXIII), 3, item 23; K Ighobor, ‘One Year of Free Trading in Africa Calls for Celebration Despite Teething Problems’ (United Nations Africa Renewal, January 2022) <https://www.un.org/africarenewal/magazine/january-2022/one-year-free-trading-africa-calls-celebration-despite-teething-problems>.

153 AfCFTA DTP (n 12) art 46.

154 Phase I negotiations took 33 months (June 2015 to March 2019) and Phase II negotiations took 36 months (February 2020 to February 2023). See K Kugler and MG Adgeh, ‘Africa and Trade and Investment Liberalization’ in D Bethlehem et al (eds), The Oxford Handbook of International Trade Law (2nd edn, OUP 2022) 409; and TRALAC, ‘AfCFTA Negotiations Timeline’ <https://www.tralac.org/resources/afcfta-negotiations-timeline.html>.

155 Beyleveld, A and Sucker, F, ‘Regulating Cross-Border Data Flows under the AfCFTA Protocol on Digital Trade: The What, Why, How, Where, and When’ (2023) 20(2) MJIEL 299, 305–10Google Scholar.

156 ibid.

157 See AfCFTA DTP (n 12) art 46.

158 African Union Commission, ‘Agenda 2063: The Africa We Want, Popular Version’ (2015) 1 <https://au.int/sites/default/files/documents/36204-doc-agenda2063_popular_version_en.pdf>.

159 See, eg, Organization of African Unity, ‘Lagos Plan of Action for the Economic Development of Africa’ (ILO 1980); and the Treaty Establishing the African Economic Community (adopted 3 June 1991, entered into force 12 May 1994) (Abuja Treaty).

160 UNCTAD, ‘UN List of Least Developed Countries’ <https://unctad.org/topic/least-developed-countries/list>.

161 The World Bank, ‘World Bank Country and Lending Groups’ <https://datahelpdesk.worldbank.org/knowledgebase/articles/906519-world-bank-country-and-lending-groups>. The Sahrawi Arab Democratic Republic is an independent AU member State. However, its economy is calculated as part of Morocco's on this list.

162 AU, ‘The Digital Transformation Strategy for Africa (2020–2030)’ (adopted 9 February 2020) section II.C (African Digital Transformation Strategy). At the continental level, the AU has issued, amongst others, the Malabo Convention (n 88); its ‘Personal Data Protection Guidelines for Africa’ (Internet Society and the Commission of the African Union 2018); and AU, ‘Data Policy Framework’ (28 July 2022) (AU Data Policy Framework).

163 African Digital Transformation Strategy ibid 3–4.

164 ibid 2.

165 Solidarity between AU Member States; cooperation between the AUC, RECs, African Institutions and International organisations; and linked to Agenda 2063 and the Sustainable Development Goals (SDGs). African Digital Transformation Strategy (n 162) 6.

166 ibid 8.

167 ibid 9.

168 ibid 12.

169 AU Data Policy Framework (n 162) 5.

170 ibid, iv.

171 ibid 19.

172 ibid.

173 Beyleveld and Sucker (n 155) 299.

174 K Kugler, ‘The Impact of Data Localisation Laws on Trade in Africa’ (2022) Mandela Institute Policy Brief No 08, 1.

175 Thomson Reuters Practical Law, ‘Data Localization Laws Global Chart: Overview’ (6 December 2023) <https://uk.practicallaw.thomsonreuters.com/w-016-7268?transitionType=Default&contextData=(sc.Default)&firstPage=true>.

176 Central Bank of Nigeria, ‘Guidelines on Point of Sale (POS) Card Acceptance Services’ (2011) section 4.4.8; Central Bank of Nigeria, ‘Guidelines on Operation of Electronic Payment Channels in Nigeria (Containing Guidelines on Mobile Point of Sale Acceptance Services)’ (2020) section 3.4.3.6; National Information Technology Development Agency, ‘Mandatory Guidelines for Nigerian Content Development in Information and Communication Technology (ICT)’ (August 2019) sections 11.1(4), 12.1(4), 13.1(2), 13.2(3); Nigerian Communications Commission, ‘Registration of Telephone Subscribers Regulations’ (2011) art 4.

177 Data Protection Act, No 3 of 2021.

178 Pursuant to National Payment Systems Act 2020 (Uganda) Act 15 of 2020, section 68, all electronic money issuers must establish and maintain their primary data centres for payment system services in Uganda.

179 Regulation No 02/2018 of 24/01/2018 on Cybersecurity, art 3 (Rwandan Cybersecurity Regulation) requires all licensed banks to maintain their primary data in Rwanda. Moreover, pursuant to Law No 16/2010 of 07/05/2010 Governing Credit Information Systems, art 4, sharing of customer information outside of Rwanda is only permitted with the permission of the Rwandan Central Bank. Additionally, Regulation No 03/2018 of 24/01/2018 on Outsourcing, art 15.2(d), referring to the Cybersecurity Regulation, also prohibits a bank from outsourcing its primary data outside Rwanda.

180 For example, Ministerial Instructions No 001/MINICT/2012 of 12/03/2012 Related to the Procurement of ICT Goods and Services by Rwanda Public Institutions, art 17, provides that all government systems and applications that process, store and provide critical government data and information must be hosted in the National Data Centre.

181 Act No 001-2021/AN of 30 March 2021, art 36.

182 African Digital Transformation Strategy (n 162) 11.

183 ibid 47.

184 AU Data Policy Framework (n 162) 12.

185 ibid 47.

186 ibid.

187 ibid 24.

188 ibid 41.

189 AfCFTA DTP (n 12) art 22.2.

190 ibid, art 22.3.

191 ibid 57–8.

192 ibid.

193 See, eg, R Mogobe, African Philosophy through Ubuntu (Mond Books Publishers 1999); Makulilo (n 135) 16–17; EM Bakibinga, ‘Managing Electronic Privacy in the Telecommunications Sub-sector: The Ugandan Perspective’ (African Electronic Privacy and Public Voice Symposium, Cape Town, 6 December 2004) <https://www.researchgate.net/publication/352934559_Managing_Electronic_Privacy_in_the_Telecom_Sub-sector_The_Ugandan_Perspective>; Neethling, J, ‘The Concept of Privacy in South African Law’ (2005) 122(1) SALJ 18Google Scholar; Bygrave, LA, ‘Privacy Protection in a Global Context – A Comparative Overview’ (2004) 47 ScStL 320, 328Google Scholar; S Gutwirth, Privacy and the Information Age (Rowman & Littlefield Publishers, Inc. 2002) 24–9. For a summary of the debate and a critique of those who reject privacy as an African value, see Makulilo, AB, ‘A Person Is a Person through Other Persons’—A Critical Analysis of Privacy and Culture in Africa’ (2016) 7(3) BeijingLRev 192Google Scholar.

194 African Charter on Human and Peoples' Rights, (adopted 27 June 1981, entered into force 21 October 1986) 21 ILM 58 (AfCHPR).

195 eg, Bygrave (n 193) 332; HN Olingera, Britz, JJ and Olivier, MS, ‘Western Privacy and/or Ubuntu? Some Critical Comments on the Influences in the Forthcoming Data Privacy Bill in South Africa’ (2007) IntlInfo&LibrRev 39(1) 31, 37Google Scholar.

196 Makulilo (n 135) 16–17.

197 Ayalew, YE, ‘Untrodden Paths towards the Right to Privacy in the Digital Era under African Human Rights Law’ (2022) 12(1) IDPL 16Google Scholar.

198 Electronic Privacy Information Center, ‘EPIC Alert – Volume 11.24’ (23 December 2004) <https://archive.epic.org/alert/EPIC_Alert_11.24.html>.

199 Banisar, D, ‘Linking ICTs, the Right to Privacy, Freedom of Expression and Access to Information’ (2010) 16(1) EAfrJPeace&HumRts 124, 125Google Scholar.

200 AfCFTA DTP (n 12) art 21.1.

201 ibid, arts 21.6(c), 21.6(d).

202 Malabo Convention (n 88).

203 The African Digital Transformation Strategy proposes modernising it in line with Convention 108 and the EU's GDPR. See African Digital Transformation Strategy (n 162) 47.

204 African Digital Transformation Strategy ibid 47.

205 See, eg, AU Data Policy Framework (n 162) 11, 35, 57, 70–1.

206 UNCTAD, ‘Harmonizing Cyberlaws and Regulations: The Experience of the East African Community’ (2012) UN Doc UNCTAD/DTL/STICT/2012/4, iii.

207 East African Community, ‘Draft EAC Legal Framework for Cyberlaws’ (November 2008).

208 ECOWAS Supplementary Act A/SA.1/01/10 on Personal Data Protection within ECOWAS.

209 ibid, art 12.

210 Incorporated Trustees of Digital Rights Lawyers Initiative v Federal Republic of Nigeria, Judgment No ECW/CCJ/JUD/16/20 (13 March 2023) para 29.

211 Southern African Development Community Model Law on Data Protection, 2012.

212 UNCTAD, ‘Data Protection and Privacy Legislation Worldwide’ <https://unctad.org/page/data-protection-and-privacy-legislation-worldwide>.

213 Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (adopted 28 January 1981, entered into force 1 October 1985) ETS No 108. Burkina Faso has not yet ratified the convention but is a signatory. Council of Europe, ‘Chart of Signatures and Ratifications of Treaty 108’ <https://www.coe.int/en/web/conventions/full-list?module=signatures-by-treaty&treatynum=108>.

214 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Natural Persons with Regard to the Processing of Personal Data and on the Free Movement of Such Data, and Repealing Directive 95/46/EC (GDPR) (Text with EEA Relevance) [2016] OJ L119/1.

215 Data Protection Act No 24 of 2019.

216 Law No 007/PR/2015 on the Protection of Personal Data, art 29, prohibits the transfer of personal data to a State that is not a member of the Economic and Monetary Community of Central Africa or the Economic Community of Central African States, unless this third State ensures a sufficient level of protection of privacy.

217 Law No 2008-12 of 25 January 2008 Concerning the Personal Data Protection, art 49.

218 Protection of Personal Information Act No 4 of 2013, section 72.

219 Organic Law No 2004-63 dated 27 July 2004 Relating to the Protection of Personal Data, art 51.

220 Data Protection and Privacy Act, 2019, section 19.

221 Cyber and Data Protection Act No 5 of 2021, section 28.

222 AfCFTA DTP (n 12) art 21.2.

223 AU Data Policy Framework (n 162) 28–9.

224 EU–New Zealand Free Trade Agreement (adopted 9 July 2023) arts 12.1(2)(c), 12.4(5).

225 DIRCO (n 142) 16.

226 INTERPOL, ‘African Cyberthreat Assessment Report: INTERPOL's Key Insight into Cybercrime in Africa’ (October 2021) 8–9 <https://www.interpol.int/en/content/download/16759/file/AfricanCyberthreatAssessment_ENGLISH.pdf>.

227 AfCFTA DTP (n 12) art 25.1.

228 ibid, art 25.2.

229 ibid, art 25.3.

230 Draft EAC Legal Framework for Cyberlaws, November 2008.

231 ECOWAS, ‘ECOWAS Regional Cybersecurity and Cybercrime Strategy’ (2021).

232 UNCTAD, ‘Cybercrime Legislation Worldwide’ <https://unctad.org/page/cybercrime-legislation-worldwide>.

233 Regulation No 010/R/CRCSI/RURA/020 of 29/05/2020 Governing Cybersecurity, art 15, prohibits networks, systems and applications of licensed ICT companies from being managed, hosted, remotely accessed or located outside Rwanda, unless explicitly authorised by the Regulatory Authority. Pursuant to art 36, licensees that contravene the regulations will be subject to financial penalties.

234 Cyber Security and Cyber Crimes Act No 2 of 2021, section 18 has an explicit data localisation requirement for ‘critical information’.

235 Benin, Burkina Faso, Cameroon, Côte d'Ivoire, Niger, Sierra Leone, South Africa and Tunisia have been invited to accede, and the AU is an observer organisation. Council of Europe, ‘Parties/Observers to the Budapest Convention and Observer Organisations to the T-CY’ <https://www.coe.int/en/web/cybercrime/parties-observers>.

236 The Budapest Convention on Cybercrime and its Protocols (adopted 23 November 2001, entered into force 1 July 2004) ETS No 185.

237 AU Data Policy Framework (n 162) 53.

238 See generally P Chavez, ‘Toward Digital Solidarity’ (Lawfare, 28 June 2022) <https://www.lawfaremedia.org/article/toward-digital-solidarity>.