Regulatory Compliance and Financial Regulation Challenges in Cross-border Financial Data Flows under AI Governance
This paper studies regulatory compliance and financial regulation issues in cross-border financial data flows under the new circumstances of increased application of artificial intelligence (AI), cloud computing and data-intensive analysis in finance. Although it does not provide new empirical data, cross-border financial data activities can be viewed in light of data protection, trade in services, prudential supervision, digital operational resilience and internal governance. AI is not the reason for the legal dispute; rather, it may have increased the scale and speed of data processing and increased dependence on external technology providers. Therefore, this paper will investigate the impact of the current cross-border data regulations, financial supervision requirements and regimes for digital operational resilience on AI-powered and cloud-based financial activities, as well as coordination deficiencies. Based on legal texts, materials from international standard-setting organisations and peer-reviewed research, this paper conducts a normative and conceptual analysis to distinguish between binding legal obligations and non-binding regulatory guidance or suggestions for compliance put forward in this paper. Several levels of context-aware reading for cross-border financial data governance have been provided, but no new global governance system has been proposed, and there is no claim or presentation of a causal effect of specific regulatory measures.
References
- OECD. (2013). The OECD Privacy Framework. Paris: OECD Publishing.
- López González, J., Del Giovane, C., & Ferencz, J. (2025). A Preliminary Mapping of Measures Affecting the Cross-Border Flow of Non-Personal Data. OECD Trade Policy Papers, No. 295. Paris: OECD Publishing. https://doi.org/10.1787/0825c57c-en
- World Trade Organization. (1994). General Agreement on Trade in Services (GATS), including Article XIV and the Annex on Financial Services. Geneva: WTO.
- Burri, M., & Kugler, K. (2024). Regulatory autonomy in digital trade agreements. Journal of International Economic Law, 27(3), 397–423. https://doi.org/10.1093/jiel/jgae025
- Mitchell, A. D., Hawkins, J. K., & Mishra, N. (2016). Dear Prudence: Allowances under International Trade and Investment Law for Prudential Regulation in the Financial Services Sector. Journal of International Economic Law, 19(4), 787–820. https://doi.org/10.1093/jiel/jgw069
- Gao, R. Y. (2023). A Battle of the Big Three?—Competing Conceptualizations of Personal Data Shaping Transnational Data Flows. Chinese Journal of International Law, 22(4), 707–787. https://doi.org/10.1093/chinesejil/jmad040
- Boukherouaa, E. B., Shabsigh, G., AlAjmi, K., Deodoro, J., Farias, A., Iskender, E. S., Mirestean, A. T., & Ravikumar, R. (2021). Powering the Digital Economy: Opportunities and Risks of Artificial Intelligence in Finance. IMF Departmental Paper 2021/024. Washington, DC: International Monetary Fund.
- Haksar, V., Carrière-Swallow, Y., Islam, E., Giddings, A., Kao, K., Kopp, E., & Quirós-Romero, G. (2021). Toward a Global Approach to Data in the Digital Age. IMF Staff Discussion Note 2021/005. Washington, DC: International Monetary Fund.
- Basel Committee on Banking Supervision. (2024). Digitalisation of Finance. Basel: Bank for International Settlements.
- Basel Committee on Banking Supervision. (2025). Principles for the Sound Management of Third-Party Risk. Basel: Bank for International Settlements.
- Financial Stability Board. (2024). The Financial Stability Implications of Artificial Intelligence. Basel: Financial Stability Board.
- Financial Stability Board. (2025). Monitoring Adoption of Artificial Intelligence and Related Vulnerabilities in the Financial Sector. Basel: Financial Stability Board.
- OECD. (2026). Supervision of Artificial Intelligence in Finance: Challenges, Policies and Practices. OECD Artificial Intelligence Papers, No. 54. Paris: OECD Publishing. https://doi.org/10.1787/92743dc1-en
- Buckley, R. P., Zetzsche, D. A., Arner, D. W., & Tang, B. W. (2021). Regulating Artificial Intelligence in Finance: Putting the Human in the Loop. Sydney Law Review, 43(1), 43–81.
- Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on Digital Operational Resilience for the Financial Sector (DORA). Official Journal of the European Union.
- Commission Delegated Regulation (EU) 2024/1774 of 13 March 2024 supplementing Regulation (EU) 2022/2554 with regard to regulatory technical standards specifying ICT risk management tools, methods, processes and policies and the simplified ICT risk management framework. Official Journal of the European Union.
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, GDPR). Official Journal of the European Union.
- Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act). Official Journal of the European Union.
- Regulation (EU) 2026/1744 of the European Parliament and of the Council of 8 July 2026 amending Regulation (EU) 2024/1689 and related legislation as regards simplification of the implementation of harmonised rules on artificial intelligence. Official Journal of the European Union.
- Financial Stability Board. (2024). Recommendations to Promote Alignment and Interoperability Across Data Frameworks Related to Cross-border Payments: Final Report. Basel: Financial Stability Board.