Date:

Cross-Border AI Security via Data Embassies

Organizations are facing challenges navigating legislation as they look across borders for their artificial intelligence (AI) deployments. So-called "data embassies" could be a solution.

Data Embassies: A Solution for Cross-Border AI Deployments

According to a January 2024 report co-authored by the Asian Business Law Institute (ABLI) and the Singapore Academy of Law, data embassies can support an organization’s desire to "insulate" its data from being accessed by the authorities of the embassy’s host country.

Challenges in Transferring Data Across Borders

Citing its interactions with public and private organizations, ABLI noted that a recurring challenge involving the transfer of data across borders comes from the reluctance of customers to grant access to their data. Once data is transferred to the host country, where the data center is located, it falls under the possession of the recipient, leaving the customer transferring that data with limited ability to act if public authorities of the host country’s jurisdiction want access to it.

Establishing Risk Assessment and Mitigation Measures

One solution to this is to establish risk assessment and mitigation measures, ABLI said, while another is to establish data embassies. The latter allows for a balance between the customer’s need to protect their data and the host country’s need to exercise sovereignty over the territory on which the data embassy is located.

Data Embassies: A New Concept

A data embassy is a concept that allows a country to host a data center in its territory, while ensuring that the data stored in that center is subject to the laws of the country of origin, rather than the laws of the host country. This concept is gaining popularity, with countries such as Estonia and Bahrain having already adopted it, while others, such as India and Malaysia, are mulling its adoption.

The Need for Standard Legislation

A data embassy can also ease friction in a global environment where AI laws differ and are difficult to navigate across borders. There is currently no consistent position on who owns the output of AI, said Bryan Tan, a partner at law firm Reed Smith who works in the entertainment and media group. Does the person who ran the AI algorithm own it? Or does the one who created the LLMs, or the user who puts in the prompt?

Conclusion

In conclusion, data embassies offer a solution to the challenges faced by organizations in deploying AI across borders. By establishing a data embassy, organizations can ensure that their data is subject to the laws of their country of origin, rather than the laws of the host country. This concept is gaining popularity, with countries such as Estonia and Bahrain having already adopted it, while others, such as India and Malaysia, are mulling its adoption.

Frequently Asked Questions

Q: What is a data embassy?
A: A data embassy is a concept that allows a country to host a data center in its territory, while ensuring that the data stored in that center is subject to the laws of the country of origin, rather than the laws of the host country.

Q: What are the benefits of a data embassy?
A: A data embassy offers several benefits, including allowing organizations to protect their data from being accessed by public authorities of the host country, while also ensuring that their data is subject to the laws of their country of origin.

Q: What are the challenges in transferring data across borders?
A: The challenges in transferring data across borders include the reluctance of customers to grant access to their data, the risk of data being accessed by public authorities of the host country, and the need to ensure compliance with the laws of the host country.

Latest stories

Read More

LEAVE A REPLY

Please enter your comment!
Please enter your name here