Analysis of global data privacy standards and surveillance risks

Historical analyses of digital privacy highlight divergent approaches to data protection and state surveillance. In China, the implementation of the Personal Information Security Specification (GB/T 35273-2017) in 2018 reflected a dual-track internet policy. While the nation maintains extensive censorship, it also developed comprehensive standards for how companies handle personal data, drawing inspiration from the EU’s General Data Protection Regulation (GDPR).

Separately, former Microsoft chief privacy adviser Caspar Bowden raised concerns regarding cloud computing and US intelligence capabilities. Bowden argued that the US Foreign Intelligence Surveillance Act Amendment Act of 2008 (FISA) allowed the National Security Agency to conduct mass surveillance on non-US persons via cloud services provided by American companies. He cautioned that international users could not fully trust cryptographic or software services from US-based providers due to the potential for secret government access and legal mandates.