Abstract
Introduction
Business compliance in international transactions across Asia-Pacific are immensely important for organizations seeking to expand their activities within this dynamic and evolving landscape. 1 From established powerhouses like China and Australia to rapidly emerging economies such as Vietnam and Bangladesh, the region offers immense business opportunities. 2 The rise of the digital economy especially the growing concerns around data and national security, and uncertainties in dispute resolution have brought significant compliance challenges for businesses, governments, and legal professionals in Asia Pacific. 3 The ability to manage the regulatory complexities across the diverse jurisdictions in this region has become a defining characteristic of competitive success for businesses. 4
Addressing these challenges, the University of Sydney Law School and the East China University of Political Science and Law jointly organized the ‘Business Compliance in International Commercial Transactions Across Asia Pacific’ conference on 21 February 2024. As an important event to celebrate the 30th Anniversary of the Sydney Centre for Asian and Pacific Law (1993–2023) and the Shanghai Winter School (1994–2024), this conference invited leading academics, practitioners, and policymakers to explore the shifting contours of compliance with early-and-middle-career researchers.
Building on the research findings from this conference, this special issue of the Chinese Journal of Transnational Law brings together a carefully selected collection of articles. We consider one of the key new compliance challenges in Asia-Pacific is security including integrated national security and data governance. By combining theoretical perspectives with practical insights, we explore the compliance challenges arising from the concerns of security and propose the relevant dispute resolution possibilities. We aim to deepen the understanding of the Asia-Pacific regulatory landscape, facilitating readers to address the increasingly complex challenges of security and dispute resolution compliance in this region.
National Security, Data Governance, and Dispute Resolution: Key Dimensions of Compliance in Asia Pacific
National Security: A Growing Driver of Regulatory Transformation
National security has become an increasingly dominant factor in shaping regulatory compliance across the Asia-Pacific region. 5 The intersection of economic policy and security concerns is transforming how governments approach foreign investment, data governance, and trade regulations. The securitization of compliance is particularly evident in policies that restrict foreign acquisitions of critical infrastructure, impose export controls on sensitive technologies and heighten scrutiny of cross-border data flows. 6
The expansion of national security-based regulations is not limited to a few countries but has become a regional trend. 7 The increased emphasis on sovereignty and protectionist policies stems from a combination of geopolitical tensions, cybersecurity threats, and economic competition. Some scholars argue that these measures are necessary to prevent economic espionage and foreign control over strategic sectors, 8 yet some scholars took the view that the national security-based measures could hinder international commercial activities as businesses must grapple with the reality of stricter operational constraints and increased scrutiny over mergers, acquisitions, and technology transfers. 9 Governments across the region are implementing broader mandates for investment review boards, requiring businesses to undergo extensive national security evaluations before proceeding with cross-border transactions. 10 The challenge for corporations is predicting how evolving definitions of national security might impact regulatory compliance. The lack of transparency in review processes exacerbates this uncertainty, as companies struggle to anticipate potential governmental interventions. 11
The implementation of these measures has been most apparent in key sectors such as telecommunications, defence, and energy. The banning of Huawei's 5G infrastructure in multiple jurisdictions, including the US, Sweden, the UK, and Australia, 12 demonstrates how governments are prioritizing national security over market-driven considerations. The justification for such bans is rooted in cybersecurity concerns, with fears that foreign technology firms could facilitate unauthorized data access or cyberespionage. 13 Yet, these moves also signal the broader geopolitical contest between major economic powers, with regulatory compliance increasingly intertwined with political decision-making. Similar security-driven measures are emerging across the region. Japan, for instance, has strengthened its scrutiny of foreign direct investments through amendments to its Foreign Exchange and Foreign Trade Act, lowering the threshold for government review in sensitive industries. 14 India also has tightened its foreign investment regulations, particularly concerning Chinese investments in Indian technology firms. 15 These evolving policies create additional hurdles for businesses, requiring them to conduct more rigorous security risk assessments and adapt compliance strategies accordingly.
Another dimension of the securitization trend is the focus on supply chain resilience. Governments are becoming increasingly cautious about dependencies on foreign suppliers for critical goods and technologies. The COVID-19 pandemic exposed vulnerabilities in global supply chains, prompting regulators to implement policies encouraging domestic production of essential commodities. 16 South Korea has launched initiatives to reduce reliance on Chinese semiconductor supply chains, aligning their industrial policies with national security objectives. 17 Similarly, the US-led Indo-Pacific Economic Framework seeks to counterbalance China's influence in regional supply chains, further reinforcing security-driven compliance obligations for businesses in the Asia-Pacific. 18
These developments create compliance challenges for multinational corporations that rely on seamless cross-border data flows for operational efficiency. The fragmentation of data governance frameworks across the region means businesses must now implement country-specific compliance mechanisms, increasing the costs and complexity of regulatory adherence. Companies handling sensitive data, particularly in industries such as finance and healthcare, are among the most affected, as they must navigate a patchwork of national security-driven data protection laws.
The changing security landscape poses significant challenges for businesses. The first challenge is to navigate uncertainty. The rapid evolution of national security regulations creates unpredictability in compliance obligations. Businesses must constantly monitor legislative updates and engage in proactive regulatory dialogue in order to anticipate policy shifts. Second, stricter screening mechanisms and localization requirements raise compliance costs by necessitating additional investments in compliance infrastructure, legal due diligence, and cybersecurity measures. Third, restrictions on foreign ownership and data localization can stymie business expansion strategies, forcing companies to adopt alternative structuring models such as joint ventures with local partners. Finally, trade tensions and economic decoupling trends mean that geopolitical risks, particularly diplomatic relations, are increasingly influencing regulatory compliance – companies operating in Asia-Pacific must assess geopolitical risks in addition to legal and financial considerations.
The contributions in this special issue provide critical insights into these trends. Dr. Tianqi Gu's article examines Australia's FIRB framework, offering a critical perspective on how national security concerns are reshaping foreign investment policies. 19 In addition, the article explores China's Foreign Investment Law and Cybersecurity Law, shedding light on the compliance challenges businesses face when navigating China's increasingly securitized regulatory environment. Gu's article helps contextualize the broader regional trends and provide a framework for understanding the future of security-driven compliance policies in the Asia-Pacific. This contribution not only enhances academic discourse on national security and compliance but also offers practical guidance for businesses and regulators striving to manage the evolving legal landscape.
Data Governance: Sovereignty, Innovation, and Fragmentation
As the world undergoes rapid digital transformation, data governance has become a critical pillar of national security-driven compliance, demanding heightened attention from policymakers, businesses, and regulators. 20 A recent example is the growing scrutiny over DeepSeek, a Chinese artificial intelligence (AI) company rapidly gaining prominence in the tech sector. Many countries have raised concerns over its data collection policies, questioning whether the company's practices involve the transfer of personal data to China. 21 This issue reflects broader anxieties about cross-border data flows, security risks, and economic espionage, prompting governments across the Asia-Pacific region to tighten regulations on data transfers. 22 For instance, China's Data Security Law and Personal Information Protection Law impose strict data localization requirements, mandating that certain categories of data be stored and processed domestically. 23 Similarly, India's draft Digital Personal Data Protection Bill prioritizes data sovereignty, requiring companies to establish localized storage and security frameworks. 24
The region's regulatory landscape reflects a delicate balance between data sovereignty, regulatory fragmentation, and the impact of emerging technologies on compliance and innovation. However, the divergence in regulatory approaches across jurisdictions has led to compliance challenges for businesses engaged in cross-border data transactions. Notably, a defining feature of data governance in the Asia-Pacific is the principle of data sovereignty, which prioritizes state control over data generated within national borders. This principle has gained geopolitical significance as governments seek to protect digital assets from foreign influence. 25 China has operationalized data sovereignty through its Data Security Law and Personal Information Protection Law, requiring sensitive data – including personal and infrastructure-related information – to be stored and processed domestically. 26 By aligning data governance policies with national security priorities, China ensures that cross-border data flows do not undermine its strategic interests, 27 implying that its approach to data sovereignty is emblematic of a broader shift in regulatory philosophy across the region. At the same time, Japan and South Korea have adopted more internationally aligned models, integrating elements of the European Union (EU)'s General Data Protection Regulation (GDPR) to facilitate cross-border data flows while ensuring privacy protections. 28
In 2020, the Organisation for Economic Co-operation and Development highlighted that countries’ increasing focus on data localization poses substantial challenges for businesses functioning across various jurisdictions. 29 The requirement to store data domestically complicates business operations, particularly for multinational corporations reliant on centralized data management systems. Companies must now invest in country-specific compliance mechanisms, including local data centres and encrypted processing solutions, to meet regulatory mandates. 30 As widely recognized in existing scholarship, these obligations escalate operational costs, introduce redundancies, and create inefficiencies, ultimately diminishing the effectiveness of cross-border data-driven business models. 31
Fragmented regulatory approaches across the region further exacerbate compliance difficulties. Countries such as Australia and Singapore have established an independent data protection regime that balance national security concerns with economic openness, offering more flexible frameworks for international data transfers. 32 By contrast, China and India impose more rigid restrictions, limiting the ability of businesses to transfer data outside their borders without explicit government approvals. 33 The lack of harmonization across regulatory frameworks forces businesses to adopt jurisdiction-specific compliance strategies, increasing the administrative burden and legal uncertainty.
Another critical dimension of data governance is its intersection with cybersecurity and digital trade policies. Governments are introducing stricter cybersecurity requirements for firms handling critical infrastructure data. China's Cybersecurity Law, for instance, mandates that companies conducting business in ‘important’ sectors implement strict security measures to prevent unauthorized access to sensitive information. 34 Data governance challenges are apparent in the financial sector, where financial technology and emerging technologies like decentralized finance and digital payments depend significantly on seamless data exchanges across various jurisdictions. 35 The absence of regulatory clarity regarding data-driven transactions has generated compliance ambiguities, particularly for companies that operate in countries with rigorous data governance regulations. The lack of standardized policies regarding digital identity verification and anti-money laundering requirements exacerbates the regulatory challenges for digital asset firms. 36
For businesses navigating this complex regulatory environment, compliance requires a proactive and adaptive approach. Companies must establish cross-functional compliance teams, invest in cybersecurity infrastructure, and conduct regular data audits to ensure adherence to evolving regulatory mandates. Engaging with policymakers through industry associations and public-private partnerships can also help businesses shape regulatory frameworks that balance data protection with economic innovation.
Regional initiatives aimed at regulatory harmonization offer potential solutions to the challenges posed by fragmentation. The Association of Southeast Asian Nations has advanced efforts to develop a regional digital governance framework that promotes interoperability and regulatory alignment. Similarly, trade agreements such as the Comprehensive and Progressive Agreement for Trans-Pacific Partnership include provisions to facilitate digital trade while safeguarding data privacy. However, these efforts remain in their early stages, and significant disparities persist between national regulatory approaches.
The contributions in this special issue provide critical insights into the complexities of data governance across the Asia-Pacific region. Dr. Yixian Li, Mr. Ravi Prakash Vyas, and Mrs. Inma Conde explore China's operationalization of data sovereignty through its Data Security Law and Personal Information Protection Law. 37 Their analysis highlights the challenges multinational corporations face in complying with strict localization requirements, particularly in light of high-profile cases such as Didi Chuxing, which exemplify the geopolitical significance of data governance. Dr. Tanveer Ahmed examines the unique challenges confronting emerging economies like Bangladesh in implementing effective data sovereignty frameworks. 38 By analysing the Digital Security Act, he identifies significant enforcement gaps and underscores the need for institutional capacity-building to strengthen compliance and cybersecurity protections. Together, these works highlight the fragmented regulatory landscape of the region and advocate for flexible, technology-neutral regulations. The authors emphasize that regional collaboration and harmonized frameworks are essential for balancing data sovereignty with economic innovation, offering valuable strategies for navigating the evolving digital economy.
Dispute Resolution: Managing Complexity in a Fragmented Legal Landscape
The proliferation of increasingly stringent national security and data security regulations across the Asia-Pacific region has generated profound implications for international commercial transactions, elevating dispute resolution mechanisms to a critical component of cross-border governance. Regulatory fragmentation across jurisdictions, coupled with the absence of harmonized compliance standards, amplifies operational complexities for businesses operating transnationally. In this context, companies, particularly multinational companies, must reconceptualize dispute resolution not merely as a post-hoc remedial tool but as an essential element of their compliance architecture and proactive risk mitigation strategies. The growing divergence in regulatory regimes, compounded by geopolitical tensions and competing sovereignty claims, necessitates anticipatory approaches to legal conflicts. Businesses are now compelled to embed pre-emptive measures, such as tailored arbitration clauses, jurisdictional risk assessments, and proactive contractual safeguards, into their operational frameworks to mitigate exposure to litigation, regulatory penalties, and operational disruptions.
Divergent legal traditions – spanning common law, civil law, and hybrid systems in Asia-Pacific – introduce unpredictability in contract enforcement, judicial recognition of awards, and interpretations of arbitration agreements. These inconsistencies necessitate that multinational corporations incorporate proactive safeguards – such as tailored arbitration clauses, multi-jurisdictional risk assessments, and contingency plans for enforcement challenges – into their transactional frameworks.
International commercial arbitration remains the predominant dispute resolution mechanism in the Asia-Pacific, bolstered by strong institutional support from leading centres such as the Singapore International Arbitration Centre, the Hong Kong International Arbitration Centre, and the China International Economic and Trade Arbitration Commission. The New York Convention enhances the enforceability of arbitral awards, offering a degree of predictability for multinational corporations. However, enforcement practices remain inconsistent across the region. For instance, while jurisdictions like Singapore and Hong Kong uphold arbitration-friendly regimes, 39 courts in China and India have occasionally invoked the public policy exception under Article V of the New York Convention to refuse to recognize foreign arbitral awards. 40 This inconsistency highlights the limitations of arbitration in effectively resolving transnational disputes. In addition, the lack of judicial independence in certain jurisdictions further amplifies uncertainty. As a result, companies must carefully assess these risks and strategically select arbitration venues, prioritizing jurisdictions with robust pro-arbitration legal frameworks and reliable enforcement records.
In addition to arbitration, alternative dispute resolution (ADR) mechanisms, such as mediation and negotiation, are gaining traction. The United Nations Convention on International Settlement Agreements Resulting from Mediation ('Singapore Mediation Convention’) has significantly advanced the recognition and enforcement of mediated settlement agreements, 41 positioning mediation as a viable option for resolving cross-border commercial disputes. 42 The Singapore Mediation Convention provides a uniform framework for enforcing international mediated settlements, similar to how the New York Convention facilitates the recognition of arbitral awards. Its adoption has been particularly notable in the Asia-Pacific region, where countries such as Singapore, China, India, and Australia have either ratified or signed the convention, reflecting a regional commitment to strengthening mediation as a dispute resolution mechanism. However, some key economies, including Japan and Indonesia, have yet to ratify the convention, limiting its reach and enforceability in certain jurisdictions. While mediation offers businesses a cost-effective, time-efficient, and relationship-preserving alternative to litigation – especially in industries where long-term partnerships are critical – its effectiveness still hinges on parties’ willingness to engage in good faith. Moreover, in jurisdictions that have not adopted the Singapore Convention or where local enforcement mechanisms remain weak, businesses may remain cautious about relying on mediation as their primary dispute resolution method. In addition, some courts continue to show reluctance in recognizing mediated settlements as legally binding, 43 further prompting businesses to weigh the risks of enforcement before choosing mediation.
Investor-state dispute settlement (ISDS) mechanisms remain a contentious issue in the Asia-Pacific. While Japan and Singapore continue to uphold ISDS provisions in their trade and investment agreements, countries such as India and Indonesia have moved toward limiting or renegotiating ISDS commitments, citing concerns over sovereignty and investor claims. 44 This shift away from ISDS in some jurisdictions reflects a broader trend of regulatory nationalism, where governments prioritize domestic legal processes over international dispute resolution forums. As a result, foreign investors face heightened uncertainty and must carefully evaluate host countries’ evolving legal frameworks when structuring investments and negotiating contracts.
Beyond arbitration and mediation, judicial cooperation in cross-border commercial dispute resolution is becoming increasingly significant. The Hague Conference on Private International Law (HCCH) has advanced discussions on legal harmonization, particularly in the recognition and enforcement of foreign judgments. While many Asia-Pacific countries, including China, have engaged with HCCH frameworks, 45 substantial implementation gaps persist. For instance, as of now, no Asia-Pacific country has ratified the Hague Judgments Convention, which aims to establish a uniform mechanism for the recognition and enforcement of foreign judgments in civil and commercial matters. 46 This lack of adoption underscores the challenges businesses face when seeking to enforce judgments across jurisdictions with varying legal frameworks. Therefore, businesses must acknowledge that the enforceability of foreign judgments remains inconsistent, necessitating a multi-faceted dispute resolution strategy that integrates arbitration, ADR, and litigation to mitigate legal uncertainties in cross-border transactions.
Despite ongoing discussions on legal harmonization, the Asia-Pacific's diverse regulatory priorities and national interests suggest that businesses will continue to face a fragmented and multilayered dispute resolution landscape. MNCs must proactively navigate jurisdictional complexities by refining their compliance strategies to safeguard commercial interests and mitigate legal risks. A key priority should be the incorporation of dispute resolution clauses tailored to the specific legal environments in which they operate, while also anticipating enforcement challenges arising from jurisdictional inconsistencies. By adopting a strategic and forward-thinking approach, businesses can more effectively manage risks, enhance legal certainty, and strengthen their ability to operate across diverse regulatory frameworks
The contributions in this special issue provide key perspectives on the evolving dispute resolution mechanisms in transnational commercial transactions. Professor Tao Du and Dr. Lu Wang examine China's engagement with the HCCH and its implications for the recognition and enforcement of foreign judgments. 47 Their study assesses China's evolving stance on legal harmonization and the potential impact on businesses. Dr. Lu Wang and Dr. Dan Xie analyse China's arbitration and litigation frameworks, focusing on the country's cautious approach to balancing international commitments with national security interests. 48 Their research highlights challenges in the predictability of arbitration enforcement and the need for clearer judicial guidance. Xie also explores China's arbitration reforms, particularly the adoption of ad hoc arbitration and its application in Belt and Road Initiative disputes. Her analysis provides insights into China's evolving arbitration landscape and the challenges of ensuring transparency and neutrality in dispute resolution. These contributions collectively offer a deeper understanding of dispute resolution trends in the Asia-Pacific, highlighting key regulatory challenges and emerging compliance strategies. Their findings provide businesses and policymakers with practical guidance on navigating cross-border dispute resolution in an increasingly complex legal environment.
Conclusion: Toward a Resilient and Adaptive Compliance Framework in Asia Pacific
The interconnectedness of the topics discussed in this special issue highlights the multi-faceted nature of compliance challenges in Asia-Pacific.
Gu's research on data security and Chinese investment shows how geopolitical factors are increasingly influencing the design and implementation of regulatory frameworks in Australia. The securitization of compliance, particularly in telecommunications and data, is part of a larger trend in which the Australian government uses regulatory tools to protect national interest. This trend is not limited to Australia, but is observed throughout the region, indicating a shift towards more stringent and politically sensitive investment regulations. Building on this, Li, Vyas, Conde, and Ahmed investigate the complexities of data governance in China, a critical area that intersects with economic policy, technological innovation, and national security. The rise of data sovereignty and localization requirements in major economies such as China and the EU reflects a growing appreciation for data's strategic value. However, as these authors point out, the fragmentation of data governance frameworks across the region poses significant challenges for MNCs navigating various inconsistent regulations. At the same time, emerging technologies such as AI and blockchain introduce new compliance dimensions, necessitating adaptive and forward-thinking regulatory approaches. In the same vein, Du and Wang's, Wang's, and Xie's articles consistently underscore the significance of legal harmonization and dispute resolution in the establishment of a stable and predictable environment for cross-border trade in the Asia-Pacific region. This is due to the prospect that legal harmonization could reduce the uncertainty associated with navigating the region's various regulatory systems, while modernized arbitration mechanisms could provide efficient and reliable dispute resolution tools. Together, these mechanisms lay the groundwork for increased economic integration and trust among Asia-Pacific economies.
The discussions in this special issue highlight an important fact: compliance in Asia-Pacific is no longer a passive response to regulatory requirements, but rather an active and strategic enabler of business success. As governments in the region implement increasingly complicated and fragmented regulatory frameworks, multinational corporations should develop adaptive compliance strategies that extend beyond legal compliance to address broader geopolitical, economic, and technological factors. For businesses that are currently operating or aspire to operate in the Asia-Pacific region, the fact necessitates reconsidering compliance as an essential component of strategic planning. The implementation of robust compliance frameworks can mitigate legal and financial risks, facilitate market entry and expansion, and enhance corporate reputation. Businesses that value compliance are more likely to cultivate robust relationships with regulators, investors, and consumers in a region such as the Asia-Pacific, where trust and predictability are essential for cross-border transactions. Policymakers, on the other hand, must strike a balance between the demands of globalization and national security. The discussions in this special issue highlight the importance of promoting international collaboration through cross-border agreements and harmonized legal frameworks. Domestic reforms are also required to improve institutional capacity, guarantee judicial independence, and ensure that national policies are consistent with international standards.
Looking ahead, the Asia-Pacific region is confronted with a number of challenges that may shape the future of business compliance in the region. For instance, the global economy's increasing dependence on digital technologies has presented significant challenges for regulatory alignment and fundamental human rights protection. Domestic regulatory frameworks are tested by technological innovations, notably including Fintech, blockchain, and AI, which are pushing policymakers to achieve a proper balance between the promotion of innovation and the protection of fundamental rights. In addition, the digitalization of trade presents both opportunities and challenges for business compliance in the region. For example, businesses may simplify operations and decrease transaction costs by implementing blockchain-based supply chain solutions, digital trade agreements, and e-commerce regulations. However, the employment of the technologies may introduce new compliance risks, particularly in the areas of data protection, cybersecurity, and intellectual property protection.
The insights presented in this special issue underscore the necessity of a paradigm shift in how compliance is perceived and implemented in Asia Pacific. Policymakers in the region should focus more on harmonizing their regulatory frameworks, promoting greater alignment with each other through regional agreements and international conventions. At the same time, they should embark on capacity-building initiatives to mitigate the disparities in regulatory resources that exist among the economies of the Asia-Pacific region. For businesses, they should take compliance as an integral part of their strategic planning processes – this requires proactive engagement with regulators, investments in compliance infrastructure, and a determination to stay ahead of emerging regulatory trends in the region. By adopting a forward-looking approach, businesses can not only better navigate the complexities of the Asia-Pacific regulatory environment, but also take advantages of the opportunities it provides.
The Asia-Pacific region is at a crossroads, where the future of cross-border commerce is being influenced by the convergence of the concern of national security, the need for better data governance, and the desire for more effective dispute resolution mechanisms. As the region's regulatory frameworks evolve in response to technological and geopolitical dynamics, it becomes increasingly critical for education institutions including the Sydney Centre for Asian and Pacific Law to work with governments and industries to foster collaboration, trust, and innovation among major economies in the region.
