{"id":3671,"date":"2024-05-21T09:00:00","date_gmt":"2024-05-21T14:00:00","guid":{"rendered":"https:\/\/www.darkreading.com\/cybersecurity-operations\/can-cybersecurity-be-unifying-factor-in-digital-trade-negotiations-"},"modified":"2024-05-21T09:00:00","modified_gmt":"2024-05-21T14:00:00","slug":"can-cybersecurity-be-a-unifying-factor-in-digital-trade-negotiations","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2024\/05\/21\/can-cybersecurity-be-a-unifying-factor-in-digital-trade-negotiations\/","title":{"rendered":"Can Cybersecurity Be a Unifying Factor in Digital Trade Negotiations?"},"content":{"rendered":"<div class=\"media_block\"><a href=\"https:\/\/i0.wp.com\/eu-images.contentstack.com\/v3\/assets\/blt6d90778a997de1cd\/blt9ada5bf4a48422ec\/664bbac5159aa1dc0448d7d9\/Globe%281800%29_Skorzewiak_Alamy.jpg?ssl=1\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/05\/can-cybersecurity-be-a-unifying-factor-in-digital-trade-negotiations.jpg?w=640&#038;ssl=1\" class=\"media_thumbnail\"><\/a><\/div>\n<div><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/05\/can-cybersecurity-be-a-unifying-factor-in-digital-trade-negotiations.jpg?w=640&#038;ssl=1\" class=\"ff-og-image-inserted\"><\/div>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><span class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_bold\">COMMENTARY<\/span><\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Over the past decade, the digital trade policy community has been consumed by battles over data privacy, cross-border data flows, and e-customs duties, on which forging an international consensus remains elusive. Yet among the geopolitical jostling on these issues,&nbsp;there is at least one critical area where we see steady, tangible progress in digital trade policy: cybersecurity.&nbsp;<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">In today&#8217;s global economy, the increasingly fragmented state of global cyber regulation undermines cybersecurity and the growth potential of digital trade. Trade negotiators should leverage the opportunity to secure more ambitious cybersecurity commitments, advancing a fair, inclusive, sustainable, and secure digital trade environment, even as negotiations on more contentious digital issues remain stalled.&nbsp;<\/span><\/p>\n<h2 class=\"ContentText ContentText_variant_h2 ContentText_align_left\" data-testid=\"content-text\" id=\"How We Got Here\">How We Got Here<\/h2>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">The European Union&#8217;s General Data Protection Regulation (GDPR) and the ensuing&nbsp;<\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/www.darkreading.com\/endpoint-security\/microsoft-425m-payment-linkedin-gdpr-violations\" rel=\"noopener\">transatlantic battles over secure data flows<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">&nbsp;were the initial source of digital trade tension in recent negotiations. <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/commission.europa.eu\/law\/law-topic\/data-protection\/international-dimension-data-protection\/adequacy-decisions_en\" rel=\"noopener\">GDPR&#8217;s&nbsp;adequacy requirements<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">&nbsp;\u2014 which set steep data protection standards for non-EU member states \u2014 blocked prior US\u2013EU cooperation around cross-border data flows, creating panic around whether data could continue to cross the Atlantic.&nbsp;<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">The attention that wasn&#8217;t consumed by data policy focused on negotiations around digital taxes and customs duties at the Organisation for Economic Co-operation and Development (OECD) and World Trade Organization (WTO), respectively.&nbsp;<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Then, last October, the US Trade Representative sent a thunderbolt out of the blue, <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/www.centerforcybersecuritypolicy.org\/insights-and-research\/unraveling-the-impact-of-ustrs-wto-reversal-on-cybersecurity-and-global-trade\" rel=\"noopener\">upending several decades&#8217; worth of US Digital Trade Policy<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">. The decision to withdraw US support for the issues of cross-border data flows, data localization, and source code review in negotiations for the Joint Statement Initiative on eCommerce at the WTO came as a shock to many.&nbsp;<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">US industry and trade associations called for the US government to reverse its decision and reaffirm its support for cross-border data flows. The concern spread to Congress, where hearings were held to understand the underlying cause of the decision. US trading partners, meanwhile, felt left out in the cold, having advocated for such provisions for years with the encouragement of the US.<\/span><\/p>\n<h2 class=\"ContentText ContentText_variant_h2 ContentText_align_left\" data-testid=\"content-text\" id=\"A Bright Spot in Digital Policy\">A Bright Spot in Digital Policy<\/h2>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Cybersecurity policy, meanwhile, has proved far less contentious, facilitating more international cooperation, and with good reason: It is foundational to trust in the digital economy. As policymakers continue to take a more active role in domestic cybersecurity&nbsp;policymaking, governments must also ensure that regulations are interoperable with those of their counterparts in order to avoid unnecessary non-tariff barriers to trade. So far, central governments around the world have laid a strong foundation, grounded in international consensus, but there&#8217;s far more work to be done to negotiate digital security standards across borders.&nbsp;<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">This groundwork can be found in a <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/www.crx2.org\/resources\/k6kvbesrpimjrrn7k78zvsdc0emht8\" rel=\"noopener\">new report<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">,&nbsp;&#8220;Guarding Global Commerce:&nbsp;How Cybersecurity is Addressed in International Trade Agreements,&#8221; from the&nbsp;<\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/www.crx2.org\/\" rel=\"noopener\">Coalition to Reduce Cyber Risk<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><span class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_italic\">.&nbsp;<\/span><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">The report assesses the 11 free trade agreements (FTAs) that have incorporated cybersecurity provisions to date. It categorizes these provisions into eight distinct areas and analyzes the commonalities and differences in how they are addressed.&nbsp;<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">The report finds that since 2018, a growing number of FTAs have incorporated cybersecurity provisions, and these provisions have become increasingly comprehensive. Building government cybersecurity capacities, cooperating in addressing security incidents, and leveraging risk-management-based approaches and international standards in domestic cyber policymaking are becoming baseline expectations in modern trade agreements. Meanwhile, more ambitious agreements, such as the&nbsp;<\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/assets.publishing.service.gov.uk\/media\/6229f350e90e0747aa8eb6ad\/CS_Singapore_1.2002_UK_Singapore_Digital_Economy_Agreement.pdf\" rel=\"noopener\">Singapore\u2013UK Digital Economy Agreement<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">, have gone as far as to &#8220;establish a mutual recognition agreement of a baseline security standard&#8221; for Internet of Things devices.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">While trade policy writ large continues to face challenges, there are opportunities to make further progress. The World Trade Organization Joint Statement Initiative on eCommerce \u2014 a 90-country agreement spanning most of the global economy \u2014 could yet be concluded before the fall. Future trade discussions between the US and Taiwan offer an opportunity to match the ambitious digital trade commitments that have been made by peer countries \u2014 such as the UK, Singapore, and Australia.&nbsp;<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">For the US, adoption of language mirroring the Singapore\u2013UK DEA on mutual recognition of IoT security baselines would be an excellent place to start. Incorporating coordinated vulnerability disclosure requirements for critical infrastructure would place the US at the forefront of this topic once again.&nbsp;Even as we face continued headwinds on provisions like data flows and e-customs duties, further progress is both needed&nbsp;and<\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><span class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_italic\">&nbsp;<\/span><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">achievable in digital trade policy. The Office of the United States Trade Representative should seize this opportunity.<\/span><\/p>\n<p><a href=\"https:\/\/www.darkreading.com\/cybersecurity-operations\/can-cybersecurity-be-unifying-factor-in-digital-trade-negotiations-\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>COMMENTARY Over the past decade, the digital trade policy community<\/p>\n","protected":false},"author":12,"featured_media":3672,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[809],"class_list":["post-3671","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-dark-reading"],"featured_image_urls":{"full":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/05\/can-cybersecurity-be-a-unifying-factor-in-digital-trade-negotiations.jpg?fit=1820%2C1066&ssl=1",1820,1066,false],"thumbnail":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/05\/can-cybersecurity-be-a-unifying-factor-in-digital-trade-negotiations.jpg?resize=150%2C150&ssl=1",150,150,true],"medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/05\/can-cybersecurity-be-a-unifying-factor-in-digital-trade-negotiations.jpg?fit=300%2C176&ssl=1",300,176,true],"medium_large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/05\/can-cybersecurity-be-a-unifying-factor-in-digital-trade-negotiations.jpg?fit=640%2C375&ssl=1",640,375,true],"large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/05\/can-cybersecurity-be-a-unifying-factor-in-digital-trade-negotiations.jpg?fit=640%2C375&ssl=1",640,375,true],"1536x1536":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/05\/can-cybersecurity-be-a-unifying-factor-in-digital-trade-negotiations.jpg?fit=1536%2C900&ssl=1",1536,900,true],"2048x2048":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/05\/can-cybersecurity-be-a-unifying-factor-in-digital-trade-negotiations.jpg?fit=1820%2C1066&ssl=1",1820,1066,true],"chromenews-featured":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/05\/can-cybersecurity-be-a-unifying-factor-in-digital-trade-negotiations.jpg?fit=1024%2C600&ssl=1",1024,600,true],"chromenews-large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/05\/can-cybersecurity-be-a-unifying-factor-in-digital-trade-negotiations.jpg?resize=825%2C575&ssl=1",825,575,true],"chromenews-medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/05\/can-cybersecurity-be-a-unifying-factor-in-digital-trade-negotiations.jpg?resize=590%2C410&ssl=1",590,410,true]},"author_info":{"display_name":"Dark Reading","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/darkreading\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/uncategorized\/\" rel=\"category tag\">Uncategorized<\/a>","tag_info":"Uncategorized","comment_count":"0","jetpack_featured_media_url":"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/05\/can-cybersecurity-be-a-unifying-factor-in-digital-trade-negotiations.jpg?fit=1820%2C1066&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/3671","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=3671"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/3671\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media\/3672"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=3671"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=3671"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=3671"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}