OpenSovereign Global Data Sovereignty Treaty Signed: Cross-Border Data Flows Gain Unified Rules for the First Time

OpenSovereign Global Data Sovereignty Treaty Signed: Cross-Border Data Flows Gain Unified Rules for the First Time

The OpenSovereign treaty, signed by 37 countries, has officially entered into force in Geneva. It is the first global multilateral agreement on cross-border data flows, defining data sovereignty, conditions for cross-border transfer, and dispute resolution mechanisms. China, the United States, and all 27 EU member states are among the signatories.

The core of OpenSovereign is the data-sovereignty principle: every country has full sovereignty over data generated within its borders, and no cross-border transfer may occur without the consent of the sovereign state. The treaty also lists seven categories of exemption, including humanitarian assistance, criminal-justice cooperation, and emergency security events.

The treaty also establishes an independent dispute-resolution body, the DataTribunal. The tribunal is composed of experts nominated by signatory states and handles cross-border data disputes. A Chinese nominee and an EU nominee will serve as the DataTribunal's first co-chairs.

After the treaty enters into force, multinational tech companies must reassess their global data architectures. Microsoft, Google, and Meta have announced they will complete data-localization compliance over the next 18 months, at a combined cost projected above $22 billion.