Cullen International has published new research on the rules for data transfers applicable in Argentina, Brazil, Canada, Chile, Colombia, Mexico, Peru and the USA, including:
- obligations to store data within the country; and
- restrictions on the transfer of data to third countries, such as requiring a similar level of personal data protection.
The research also examines whether and how multilateral arrangements facilitate international data transfers, including those established by the Asia-Pacific Economic Cooperation (APEC), the United States-Mexico-Canada Agreement (USMCA), and the European Union.
In Argentina, Canada and Mexico, personal data can be transferred to foreign countries that offer a similar level of protection to personal data or that are party to specific international schemes.
Brazil, Colombia and Peru only accept a similar level of protection to authorise international data transfers. International data transfers are usually possible from the USA and Chile, since these countries do not impose specific restrictions.

For more information or to access the full benchmark, please click on “Access the full content” - or on “Request Access”, in case you are not subscribed to our Americas Digital Economy service.
more news
18 March 26
Global trends in 5G and beyond
Our latest Global Trends benchmark covers 5G policies and regulations and their evolution towards 6G across 20 jurisdictions around the world.
16 March 26
Africa tightens oversight of IoT connectivity as roaming and SIM rules diverge
Cullen International’s latest benchmarks assess the regulatory frameworks affecting IoT and M2M services in Africa. The research examines three core areas: whether permanent roaming is permitted, requirements for authorisation and notification, and whether and how SIM cards should be registered.
12 March 26
National implementation of the EU Gigabit Infrastructure Act
The Gigabit Infrastructure Act (GIA) is a regulation and as such directly applicable in all member states without the need for transposition into national law. Despite being a regulation, the GIA often sets minimum requirements, on top of which member states can adopt additional measures to address country-specific circumstances. Our new benchmark shows the choices made by member states when implementing the GIA.