The Economics of Data Sovereignty and Trade Barriers

International trade theory was developed around the movement of physical goods, with tariffs, quotas, and other TBTs affecting producer surplus, consumer welfare, and market resource allocation. With the advent of digital trade, however, data now plays a dominant role in cross-border trade in products and services and will continue to play a key role in determining the competitiveness of nations. 

Data localisation requirements can affect the competitiveness of cloud services by restricting where customer data can be stored and processed. The GDPR (General Data Protection Regulation), for example, sets rules for how personal data can be transferred and protected, while the Schrems II ruling made some international data transfers more legally complex. These regulations can influence which cloud providers businesses can use and where they can operate. How will these rules reshape competition in global cloud markets, and who will ultimately benefit? 

Data Localisation as a Non-Tariff Barrier

A data localisation mandate requires certain types of data to be stored or processed in a location specified by law. Economically, this is similar to a non-tariff trade barrier. While it may not impose a direct tax on foreign-produced goods entering the market, it increases the costs of serving customers in the country because foreign companies may need to establish duplicate facilities domestically or withdraw from the local market entirely.

The OECD's Digital Services Trade Restrictiveness Index supports this argument. According to its data, barriers affecting digital trade have gone up by 25% since 2014, largely because of measures targeting cross-border data flows and localisation requirements. The effect mirrors what trade economists see with technical barriers to trade in goods markets: compliance costs hit foreign entrants hardest, pushing the effective price of the imported service above the domestic alternative.

The Tariff Parallel in European Cloud Markets

The 2020 Schrems II decision provides an excellent case study of these issues, as it essentially rendered invalid the EU-US Privacy Shield. Schrems II resulted in an increase in the amount of data being stored in Europe rather than sent to the United States, as courts found that European data subjects were not adequately protected from US surveillance practices under the GDPR. As a result, companies that had been sending data to the US now faced greater legal risks when transferring data, moving more of that data closer to the EU.

The analogy for economics students is quite simple. By raising the price of imported goods through tariffs, governments allow domestic providers to capture more market share than they would under a free-trade regime.

Data residency requirements have a functionally similar effect in cloud storage. When regulation makes it costlier or legally riskier to store European data on US-controlled servers, European alternatives pick up market share. A Swiss-based provider offering free cloud storage with EU data residency may appear more attractive to a compliance-conscious business than a US hyperscaler, regardless of which one has better economies of scale. That competitive advantage looks a lot like the protection a domestic manufacturer gets behind a tariff wall.

None of this means localisation rules were designed as protectionist instruments. Their stated purpose is privacy protection, not industrial policy. But the economic effect is the same: market share moves towards domestic suppliers, compliance costs go up for foreign incumbents, and the affected market becomes less contestable.

Welfare Trade-Offs and Deadweight Loss

Classical trade theory suggests that data localisation can create deadweight loss when firms are required to use local data centres instead of more efficient global providers. For example, if US hyperscalers benefit from economies of scale, requiring them to use local data centres would raise their costs and significantly increase storage prices. The OECD believes that a 0.05 point reduction in the Digital Services Trade Restrictiveness Index will result in a 72.5% increase in total trade. The public-good characteristics of privacy provide a stronger economic rationale for regulating data localisation. Therefore, policymakers must weigh the cost of localisation (i.e., higher storage costs and the potential for lost innovation due to smaller suppliers that are unable to match the R&D investment of hyperscalers) against the potential benefits of increased efficiency.

What This Means for Trade Policy Going Forward

Data sovereignty is likely to remain an important issue in the future of digital trade. The EU-U.S. Data Privacy Framework, established in 2023, provides an example of how data sovereignty concerns can be reduced; however, past (Schrems I & II) legal challenges to Transatlantic Adequacy arrangements suggest that future arrangements are likely to face further legal challenges.

The terminology will continue to evolve as tariffs become localisation mandates and quotas become residency requirements; however, the underlying rationale regarding comparative advantage and welfare trade-offs will remain unchanged. With digital services making up a large percentage of the world's economy, accurately balancing the regulatory environment for these services will be as important in the future as traditional trade negotiations