References

Aaronson, S. A., & Leblond, P. (2018). *Another Digital Divide: The Rise of Data Realms and Its Implications for the WTO*. Journal of International Economic Law, 21(2), 245–272.

African Union. (2022). *African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention) *. Addis Ababa: African Union Commission.

Armbrust, M., Fox, A., Griffith, R., Joseph, A. D., Katz, R., Konwinski, A., Lee, G., Patterson, D., Rabkin, A., Stoica, I., & Zaharia, M. (2010). A view of cloud computing. *Communications of the ACM, 53*(4), 50–58.

ASEAN. (2016). *ASEAN Framework on Personal Data Protection*. ASEAN Telecommunications and Information Technology Ministers Meeting.

ASEAN. (2018). *ASEAN Framework on Digital Data Governance*. ASEAN Secretariat.

ASEAN. (2021). *ASEAN Data Management Framework and ASEAN Cross-Border Data Flows Mechanism: Implementing Guidelines*. ASEAN Secretariat.

ASEAN. (2026). *ASEAN Digital Sector*. ASEAN Secretariat.

Asian Development Bank. (2023). *Asian economic integration report 2023: Digital transformation and regional cooperation*. Asian Development Bank.

Asian Development Bank. (2023). *Digital Innovation and Skills Development in Asia*. Manila: Asian Development Bank.

Asian Development Bank. (2023). *Digital Integration and Policy Harmonization in Asia*. Manila: Asian Development Bank.

Asian Development Bank. (2023). *Digital Literacy and Inclusion in Asia and the Pacific*. Manila: Asian Development Bank.

Asian Development Bank. (2023). *Digital Transformation in Asia and the Pacific: Governance, Regulation and Institutional Capacity*. Manila: Asian Development Bank.

Asian Development Bank. (2023). *Digital Transformation in Asia and the Pacific: Opportunities and Challenges*. Manila: Asian Development Bank.

Asian Development Bank. (2023). *Digital Transformation in Asia and the Pacific: Opportunities and Governance Challenges*. Manila: Asian Development Bank.

Bamberger, K. A., & Mulligan, D. K. (2015). *Privacy on the Ground: Driving Corporate Behavior in the United States and Europe*. MIT Press.

Bannister, F., & Connolly, R. (2020). The future of digital government: Governance, innovation, and global cooperation. *Government Information Quarterly*, 37(4), 101-112.

Barocas, S., & Selbst, A. D. (2016). *Big Data’s Disparate Impact*. California Law Review.

Barocas, S., & Selbst, A. D. (2016). Big data’s disparate impact. *California Law Review, 104*(3), 671–732.

Barocas, S., Hardt, M., & Narayanan, A. (2019). *Fairness and machine learning*. fairmlbook.org

Barocas, S., Hardt, M., & Narayanan, A. (2019). *Fairness and machine learning: Limitations and opportunities*. New York, NY: FairMLBook.

Bauer, M., Ferracane, M. F., Lee-Makiyama, H., & van der Marel, E. (2014). *The Costs of Data Localisation: Friendly Fire on Economic Recovery*. European Centre for International Political Economy (ECIPE).

Bauer, M., Lee-Makiyama, H., Van Der Marel, E., & Verschelde, B. (2014). *The costs of data localization*. European Centre for International Political Economy.

Bennett, C. J., & Raab, C. D. (2020). *The Governance of Privacy: Policy Instruments in Global Perspective* (2nd ed.). MIT Press.

Binns, R. (2018). Fairness in machine learning: Lessons from political philosophy. *Proceedings of Machine Learning Research, 81*, 149–159.

Bostrom, N. (2014). *Superintelligence: Paths, Dangers, Strategies*. Oxford University Press.

boyd, d. m., & Ellison, N. B. (2007). Social network sites: Definition, history, and scholarship. *Journal of Computer-Mediated Communication, 13*(1), 210–230.

Breznitz, D., & Ornston, D. (2022). Public-private partnerships and innovation policy in the digital economy. *Research Policy*, 51(3), 104-118.

Brynjolfsson, E., & McAfee, A. (2017). *Machine, Platform, Crowd: Harnessing Our Digital Future*. W.W. Norton & Company.

Buolamwini, J., & Gebru, T. (2018). Gender shades: Intersectional accuracy disparities in commercial gender classification. *Proceedings of Machine Learning Research, 81*, 1–15.

Bygrave, L. A. (2014). *Data privacy law: An international perspective*. Oxford University Press.

California Privacy Protection Agency. (2024). *California Privacy Rights Act Regulations and Guidance*. Sacramento, CA: CPPA.

Cate, F. H., & Mayer-Schönberger, V. (2019). *Notice and Consent in a World of Big Data*. International Data Privacy Law, 4(2), 67–73.

Chander, A., & Le, U. P. (2015). Data Nationalism. *Emory Law Journal*, 64(3), 677–739.

Council of Europe. (1950). *European Convention on Human Rights*.

Crain, M. (2018). *Automated Media: An Institutional Theory Perspective on Algorithmic Media Production and Consumption*. Routledge.

Crain, M. (2018). *The limits of transparency: Data brokers and commodification*. New Media & Society, 20(1), 88–104.

Creemers, R. (2022). *China's Emerging Data Governance Framework*. Oxford University Press.

Creemers, R. (2022). China's evolving data governance regime: Data security, privacy, and state control. *China Law and Policy Review, 7*(1), 45–71.

De Stadler, E. (2021). *POPIA Compliance and South African Privacy Law*. Juta & Company.

Doneda, D., Mendes, L. S., & Bioni, B. R. (2021). *The Brazilian General Data Protection Law (LGPD): Foundations, Principles and Impacts*. Brazilian Journal of Public Policy, 11(1), 45–67.

ENISA. (2023). *Threat landscape report 2023*. European Union Agency for Cybersecurity.

ENISA. (2024). *Cybersecurity Economics and Risk Report*. European Union Agency for Cybersecurity.

ENISA. (2024). *Cybersecurity Threat Landscape in Healthcare Sector*. European Union Agency for Cybersecurity.

ENISA. (2024). *Cybersecurity Threat Landscape Report*. European Union Agency for Cybersecurity.

ENISA. (2024). *Financial Sector Cyber Threat Landscape Report*. European Union Agency for Cybersecurity.

ENISA. (2024). *Human Factors in Cybersecurity Report*. European Union Agency for Cybersecurity.

ENISA. (2024). *Human Impact of Cybersecurity Incidents Report*. European Union Agency for Cybersecurity.

ENISA. (2024). *Identity and Access Management Threat Landscape*. European Union Agency for Cybersecurity.

ENISA. (2024). *Threat Landscape for Critical Infrastructure*. European Union Agency for Cybersecurity.

ENISA. (2024). *Threat Landscape for Industrial Cybersecurity*. European Union Agency for Cybersecurity.

ENISA. (2024). *Threat Landscape Report*. European Union Agency for Cybersecurity.

European Central Bank. (2023). *Cyber Fraud and Financial Stability Report*. ECB Publications.

European Commission. (2021). *Adequacy decisions and international data transfers*. European Union.

European Commission. (2021). *Artificial intelligence act proposal*. European Union.

European Commission. (2023). *Adequacy decision for Japan under the General Data Protection Regulation*. Brussels: European Commission.

European Commission. (2024). *AI Strategy and Digital Collaboration Frameworks*. Brussels: European Commission.

European Commission. (2024). *Artificial Intelligence Act*. Brussels: European Union.

European Commission. (2024). *Data Strategy and European Data Governance Framework*. Brussels: European Commission.

European Commission. (2024). *International Data Transfers and Adequacy Mechanisms*. Brussels: European Commission.

European Commission. (2024). *International Data Transfers and Data Protection Rules*. Brussels: European Commission.

European Commission. (2024). *The General Data Protection Regulation (GDPR): Strengthening Citizens' Rights in the Digital Age*. Brussels: European Commission.

European Commission. (2025). *GDPR implementation and enforcement review*.

European Data Protection Board (EDPB). (2024). *Guidelines on the Independence of Supervisory Authorities*. Brussels: European Union.

European Union Agency for Cybersecurity (ENISA). (2023). *Cybersecurity Standards and Certification Frameworks*. Luxembourg: European Union Publications Office.

European Union Agency for Cybersecurity (ENISA). (2024). *Cybersecurity Awareness Raising Guidelines*. Luxembourg: Publications Office of the European Union.

European Union Agency for Cybersecurity (ENISA). (2024). *Cybersecurity Enforcement and Regulatory Cooperation Report*. Luxembourg: Publications Office of the European Union.

European Union Agency for Cybersecurity (ENISA). (2024). *Effective Regulatory Oversight in Cybersecurity Governance*. Luxembourg: Publications Office of the European Union.

European Union Agency for Cybersecurity (ENISA). (2024). *Public-Private Partnerships in Cybersecurity: Strengthening Collective Resilience*. Luxembourg: Publications Office of the European Union.

European Union Agency for Cybersecurity (ENISA). (2024). *Threat Landscape Report 2024*. Luxembourg: Publications Office of the European Union.

European Union. (2012). *Charter of Fundamental Rights of the European Union*.

European Union. (2016). *General Data Protection Regulation (GDPR)*.

European Union. (2016). *Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation) *.

European Union. (2018). *General Data Protection Regulation (GDPR)*.

European Union. (2024). *Regulation (EU) 2024/1689: Artificial Intelligence Act*. Official Journal of the European Union.

Federal Trade Commission (FTC). (2023). *Identity theft report and consumer protection analysis*.

Federal Trade Commission. (2014). *Data Brokers: A Call for Transparency and Accountability*. Federal Trade Commission.

Floridi, L. (2022). *The ethics of artificial intelligence*. Oxford University Press.

Floridi, L., & Cowls, J. (2019). A unified framework of five principles for AI in society. *Harvard Data Science Review*, 1(1), 1–15.

Floridi, L., Cowls, J., Beltrametti, M., Chatila, R., Chazerand, P., Dignum, V., Luetge, C., Madelin, R., Pagallo, U., Rossi, F., Schafer, B., Valcke, P., & Vayena, E. (2018). AI4People—An ethical framework for a good AI society. *Minds and Machines, 28*(4), 689–707.

Floridi, L., Cowls, J., Beltrametti, M., et al. (2018). *AI4People—An Ethical Framework for a Good AI Society*. Minds and Machines.

Floridi, L., et al. (2018). *AI4People: An Ethical Framework for a Good AI Society*. Minds and Machines.

FTC (Federal Trade Commission). (2023). *Consumer Sentinel Network Data Book*. U.S. Federal Trade Commission.

FTC. (2019). *Equifax Data Breach Settlement and Enforcement Report*. Federal Trade Commission.

Gandomi, A., & Haider, M. (2015). Beyond the hype: Big data concepts, methods, and analytics. *International Journal of Information Management, 35*(2), 137–144.

González Fuster, G. (2014). *The Emergence of Personal Data Protection as a Fundamental Right of the EU*. Springer.

Goodfellow, I., Bengio, Y., & Courville, A. (2016). *Deep Learning*. MIT Press.

Government of Canada. (2024). *Digital Charter Implementation and Privacy Modernization Initiatives*. Ottawa: Government of Canada.

Government of India. (2023). *Digital Personal Data Protection Act 2023*. New Delhi: Ministry of Electronics and Information Technology.

Greenleaf, G. (2014). *Global data privacy laws: 89 countries, and accelerating*. Privacy Laws & Business International Report.

Greenleaf, G. (2020). *Global data privacy laws 2020: 132 national laws and many bills*. Privacy Laws & Business International Report.

Greenleaf, G. (2020). *Global data privacy laws and harmonisation trends*. Privacy Laws & Business International Report.

Greenleaf, G. (2020). *Global data privacy laws and the problem of harmonisation*. Privacy Laws & Business International Report.

Greenleaf, G. (2022). *Asian data privacy laws: Trade and human rights perspectives* (3rd ed.). Oxford University Press.

Greenleaf, G. (2022). *Global Data Privacy Laws 2022: Despite COVID Delays, 157 Laws Show GDPR Dominance*. Privacy Laws & Business International Report, 177, 10–13.

Greenleaf, G. (2022). *Global Data Privacy Laws and Regional Convergence Trends*. Privacy Laws & Business International Report, 177, 10–15.

Greenleaf, G. (2022). Global Data Privacy Laws and Data Sovereignty Developments. *Privacy Laws & Business International Report*, 177, 10–15.

Greenleaf, G. (2023). *Global Data Privacy Laws 2023: Despite Challenges, More Laws and More Data Rights*. Privacy Laws & Business International Report, 184, 10–15.

Greenleaf, G. (2023). *Global data privacy laws 2023: Despite slowing growth, 68% of countries have privacy laws*. Privacy Laws & Business International Report, 183, 10–13.

IBM Security. (2023). *Cost of a Data Breach Report*. Ponemon Institute.

IBM Security. (2024). *Cost of a data breach report*. IBM Corporation.

IBM Security. (2024). *Cost of a Data Breach Report*. Ponemon Institute.

Institute of Electrical and Electronics Engineers (IEEE). (2023). *Ethically Aligned Design: A Vision for Prioritizing Human Well-being with Autonomous and Intelligent Systems*. New York: IEEE.

International Association of Privacy Professionals (IAPP). (2023). *Global Privacy Enforcement Report*. Portsmouth, NH: IAPP.

International Association of Privacy Professionals (IAPP). (2024). *Global privacy enforcement report*. IAPP Research Publications.

International Association of Privacy Professionals (IAPP). (2024). *US State Privacy Legislation Tracker*. IAPP Research Publications.

International Association of Privacy Professionals (IAPP). (2025). *US State Privacy Legislation Tracker*. Portsmouth, NH: IAPP.

International Labour Organization (ILO). (2022). *Informal Economy and Digital Transformation in Developing Countries*. Geneva: ILO.

International Organization for Standardization (ISO). (2024). *ISO/IEC 27001 Information Security Management Systems*. Geneva: ISO.

International Organization for Standardization (ISO). (2024). *ISO/IEC 27001: Information Security, Cybersecurity and Privacy Protection*. Geneva: ISO.

International Telecommunication Union (ITU). (2023). *Bridging the Digital Skills Gap: Global Collaboration Models*. Geneva: ITU.

International Telecommunication Union (ITU). (2023). *Digital Skills Insights and Global Cybersecurity Awareness Initiatives*. Geneva: ITU.

International Telecommunication Union (ITU). (2024). *Digital Standards Initiative and Global ICT Standards*. Geneva: ITU.

International Telecommunication Union (ITU). (2024). *Global Cybersecurity Index & Capacity Building Frameworks*. Geneva: ITU.

International Telecommunication Union. (2021). *Global cybersecurity index*. ITU.

Isaak, J., & Hanna, M. J. (2018). *User Data Privacy: Facebook, Cambridge Analytica, and Privacy Protection*. IEEE Internet Computing.

Isaak, J., & Hanna, M. J. (2018). *User Data Privacy: Facebook, Cambridge Analytica, and the Political Economy of the Digital Age*. IEEE Internet Policy Review.

Isaak, J., & Hanna, M. J. (2018). User data privacy: Facebook, Cambridge Analytica, and privacy protection. *Computer, 51*(8), 56–59.

ISO/IEC. (2022). *Information security and privacy standards overview*. International Organization for Standardization.

Janssen, M., Charalabidis, Y., & Zuiderwijk, A. (2012). Benefits, adoption barriers and myths of open data and open government. *Information Systems Management, 29*(4), 258–268.

Kaspersky. (2024). *Global Cyber Threat Landscape Report*. Kaspersky Lab.

Kaspersky. (2024). *Global cybersecurity threat intelligence report*. Kaspersky Lab.

Kaspersky. (2024). *Global cybersecurity threat report*. Kaspersky Lab.

Kavis, M. J. (2014). *Architecting the Cloud: Design Decisions for Cloud Computing Service Models*. Wiley.

Kim, J., & Park, S. (2022). Privacy regulation and digital governance in South Korea: Recent developments and future challenges. *Computer Law & Security Review, 46*, 105714.

Kitchin, R. (2021). *The Data Revolution: Power, Data Infrastructures and the Consequences of Big Data* (3rd ed.). Sage Publications.

Kitchin, R. (2021). *The data revolution: Power, politics and datafication* (2nd ed.). Sage Publications.

Klievink, B., Bharosa, N., & Tan, Y. H. (2021). The collaborative governance of public-private partnerships in digital transformation. *Government Information Quarterly*, 38(2), 101-112.

Kshetri, N. (2018). Cybercrime and cybersecurity in the global south. *Springer International Publishing*.

Kshetri, N. (2021). *Cybersecurity Management in Developing Economies*. University of Toronto Press.

Kshetri, N. (2022). Privacy and data protection in Asia: Emerging trends and regulatory developments. *Telecommunications Policy, 46*(8), 102361.

Kuner, C. (2013). *Transborder Data Flows and Data Privacy Law*. Oxford University Press.

Kuner, C. (2020). *Transborder data flows and the GDPR*. Oxford University Press.

Kuner, C. (2021). *Transborder data flows and data privacy law*. Oxford University Press.

Kuner, C. (2023). *Transborder data flows and data privacy law*. Oxford University Press.

Kuner, C., Bygrave, L. A., & Docksey, C. (2020). *The EU General Data Protection Regulation (GDPR): A Commentary*. Oxford University Press.

Kuner, C., Bygrave, L. A., & Docksey, C. (2020). *The GDPR: Understanding the EU General Data Protection Regulation*. Oxford University Press.

Laney, D. (2001). *3D data management: Controlling data volume, velocity and variety*. META Group Research Note.

Liu, Y.-K., & Moody, D. (2024). *Post-Quantum Cryptography, and the Quantum Future of Cybersecurity*. Physical Review Applied.

Livingstone, S., Stoilova, M., & Kelly, A. (2017). *Cyberbullying and Online Harassment: The Role of Data Exposure and Digital Risk*. London School of Economics.

Livingstone, S., Stoilova, M., & Nandagiri, R. (2017). Children’s data and privacy online: Growing up in a digital age. *London School of Economics Report*.

Makulilo, A. B. (2022). *African Data Privacy Laws and Regional Harmonization*. Springer.

Maldonado, M. (2021). *Privacy Regulation in Latin America: Emerging Trends and Challenges*. Information & Communications Technology Law, 30(2), 145–162.

Marinescu, D. C. (2017). *Cloud Computing: Theory and Practice* (2nd ed.). Morgan Kaufmann.

Marwick, A., & boyd, d. (2018). *Networked Privacy and Online Reputation*. Yale University Press.

Mayer-Schönberger, V., & Cukier, K. (2013). *Big data: A revolution that will transform how we live, work, and think*. Houghton Mifflin Harcourt.

Mell, P., & Grance, T. (2011). *The NIST Definition of Cloud Computing (Special Publication 800-145) *. National Institute of Standards and Technology.

Narayanan, A., & Shmatikov, V. (2008). Robust de-anonymization of large sparse datasets. *IEEE Symposium on Security and Privacy Proceedings*, 111–125.

Narayanan, A., & Shmatikov, V. (2008). Robust de-anonymization of large sparse datasets. *Proceedings of the IEEE Symposium on Security and Privacy*, 111–125.

Nasscom. (2023). *Data Governance and Localization in India: Emerging Regulatory Trends*. New Delhi: Nasscom.

National Institute of Standards and Technology (NIST). (2018). *Computer Security Incident Handling Guide (SP 800-61 Rev. 2)*. U.S. Department of Commerce.

National Institute of Standards and Technology (NIST). (2018). *NIST cybersecurity framework*. U.S. Department of Commerce.

National Institute of Standards and Technology (NIST). (2018). *NIST Special Publication 800-61 Rev. 2: Computer Security Incident Handling Guide*. U.S. Department of Commerce.

National Institute of Standards and Technology (NIST). (2020). *Cybersecurity framework and national risk guidance*. U.S. Department of Commerce.

National Institute of Standards and Technology (NIST). (2020). *NIST Privacy Framework: A tool for improving privacy through enterprise risk management*.

National Institute of Standards and Technology (NIST). (2024). *AI Risk Management Framework (AI RMF 1.0) *. Gaithersburg, MD: U.S. Department of Commerce.

National Institute of Standards and Technology (NIST). (2024). *Cybersecurity Framework (CSF) 2.0*. Gaithersburg, MD: U.S. Department of Commerce.

National Institute of Standards and Technology (NIST). (2024). *Post-Quantum Cryptography Standards: FIPS 203, FIPS 204 and FIPS 205*. U.S. Department of Commerce.

National Institute of Standards and Technology (NIST). (2024). *Zero Trust Architecture (SP 800-207) *. Gaithersburg, MD: U.S. Department of Commerce.

National Institute of Standards and Technology (NIST). (2026). *Post-Quantum Cryptography*. U.S. Department of Commerce.

Nigeria Data Protection Commission. (2024). *Nigeria Data Protection Act Implementation Guidelines*. Abuja: NDPC.

Nissenbaum, H. (2010). *Privacy in context: Technology, policy, and the integrity of social life*. Stanford University Press.

NIST. (2020). *Cybersecurity and Privacy Framework*. National Institute of Standards and Technology.

NIST. (2020). *Cybersecurity and Risk Management Framework*. National Institute of Standards and Technology.

NIST. (2020). *Cybersecurity Framework (CSF) and National Security Guidelines*. National Institute of Standards and Technology.

NIST. (2020). *Cybersecurity Framework and Risk Management Guidelines*. National Institute of Standards and Technology.

NIST. (2020). *Cybersecurity Framework for Business Risk Management*. National Institute of Standards and Technology.

NIST. (2020). *Digital Financial Security Guidelines*. National Institute of Standards and Technology.

NIST. (2020). *Digital Identity Guidelines (SP 800-63) *. National Institute of Standards and Technology.

NIST. (2020). *Guidelines for Managing Online Abuse and Digital Identity Risks*. National Institute of Standards and Technology.

NIST. (2020). *Health Information Privacy and Security Framework*. National Institute of Standards and Technology.

NIST. (2020). *Privacy Framework*. National Institute of Standards and Technology.

NIST. (2020). *Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management*. National Institute of Standards and Technology.

NIST. (2020). *Security and Privacy Controls for Information Systems and Organizations (SP 800-53) *. National Institute of Standards and Technology.

OECD. (2013). *OECD privacy framework*. Organisation for Economic Co-operation and Development.

OECD. (2013). *The OECD Privacy Framework*. Organisation for Economic Co-operation and Development.

OECD. (2019). *OECD principles on artificial intelligence*. Organisation for Economic Co-operation and Development.

OECD. (2022). *Enhancing access to and sharing of data: Reconciling risks and benefits for data reuse across societies*. Organisation for Economic Co-operation and Development.

OECD. (2023). *OECD guidelines on the protection of privacy and transborder flows of personal data*.

OECD. (2023). *OECD privacy guidelines and governance framework*.

OECD. (2024). *Cybersecurity Policy Frameworks in the Digital Economy*. Organisation for Economic Co-operation and Development.

OECD. (2024). *Data Governance and Cybersecurity in the Digital Age*. Organisation for Economic Co-operation and Development.

OECD. (2024). *Data Governance and Digital Trust Frameworks*. Organisation for Economic Co-operation and Development.

OECD. (2024). *Data Governance and Privacy in the Digital Economy*. Organisation for Economic Co-operation and Development.

OECD. (2024). *Data Governance and Responsible Innovation in the Digital Economy*.

OECD. (2024). *Data Governance in the Digital Age*. Organisation for Economic Co-operation and Development.

OECD. (2024). *Data Governance in the Digital Economy*. Organisation for Economic Co-operation and Development.

OECD. (2024). *Digital Health and Data Governance Report*. Organisation for Economic Co-operation and Development.

OECD. (2024). *Digital Inclusion and Data Governance for Vulnerable Populations*. Organisation for Economic Co-operation and Development.

OECD. (2024). *Digital Privacy and Data Governance Report*. Organisation for Economic Co-operation and Development.

OECD. (2024). *Digital Security Risk Management for Economic and Social Prosperity*. Organisation for Economic Co-operation and Development.

OECD. (2024). *Digital Trust and Data Governance in the Digital Economy*. Organisation for Economic Co-operation and Development.

OECD. (2024). *Digital Trust and Governance in the Data Economy*. Organisation for Economic Co-operation and Development.

OECD. (2024). *Economic Impacts of Cybersecurity Incidents*. Organisation for Economic Co-operation and Development.

OECD. (2024). *Human Factors in Cyber Risk Management*. Organisation for Economic Co-operation and Development.

OECD. (2024). *Intellectual Property and Trade Secret Protection in the Digital Economy*. Organisation for Economic Co-operation and Development.

OECD. (2024). *OECD AI Principles*. Organisation for Economic Co-operation and Development.

OECD. (2024). *OECD Principles on Artificial Intelligence*. Organisation for Economic Co-operation and Development.

OECD. (2024). *Online Safety and Digital Harassment Policy Framework*. Organisation for Economic Co-operation and Development.

OECD. (2024). *Principles on Artificial Intelligence and Data Governance*. Organisation for Economic Co-operation and Development.

OECD. (2024). *Privacy and Data Protection in the Digital Economy*. Organisation for Economic Co-operation and Development.

Office of the Privacy Commissioner of Canada. (2024). *Guide to the Personal Information Protection and Electronic Documents Act (PIPEDA)*. Government of Canada.

Office of the Privacy Commissioner of Canada. (2024). *PIPEDA Fair Information Principles and Privacy Guidance*. Ottawa: OPC.

Office of the United Nations High Commissioner for Human Rights (OHCHR). (2024). *The Future of Human Rights and Digital Technologies*. United Nations.

Organisation for Economic Co-operation and Development (OECD). (2013). *OECD privacy framework*. OECD Publishing.

Organisation for Economic Co-operation and Development (OECD). (2023). *Bridging Digital Divides: Enhancing Digital Literacy*. Paris: OECD Publishing.

Organisation for Economic Co-operation and Development (OECD). (2023). *Data Free Flow with Trust and Digital Trade*. Paris: OECD Publishing.

Organisation for Economic Co-operation and Development (OECD). (2023). *Data governance policies in the digital age*. OECD Publishing.

Organisation for Economic Co-operation and Development (OECD). (2023). *Data governance policies in the digital age*. Paris: OECD Publishing.

Organisation for Economic Co-operation and Development (OECD). (2023). *Digital Government Review and Public Sector Innovation*. Paris: OECD Publishing.

Organisation for Economic Co-operation and Development (OECD). (2023). *Digital Security Risk Management for Economic and Social Prosperity*. Paris: OECD Publishing.

Organisation for Economic Co-operation and Development (OECD). (2023). *Digital Security Risk Management for Economic Prosperity*. Paris: OECD Publishing.

Organisation for Economic Co-operation and Development (OECD). (2023). *OECD Digital Economy Outlook 2023*. Paris: OECD Publishing.

Parker, G., Van Alstyne, M., & Choudary, S. (2016). *Platform Revolution: How Networked Markets Are Transforming the Economy*. W.W. Norton & Company.

Personal Data Protection Commission (PDPC) Singapore. (2023). *Advisory guidelines on the Personal Data Protection Act*. Singapore: Government of Singapore.

Personal Information Protection Commission (PIPC). (2024). *Overview of South Korea's Personal Information Protection Act*. Seoul: Government of the Republic of Korea.

Personal Information Protection Commission (PPC). (2023). *Overview of the Act on the Protection of Personal Information*. Tokyo: Government of Japan.

Ponemon Institute. (2023). *Cost of a Data Breach Report*. IBM Security.

Ponemon Institute. (2023). *Cost of Identity Fraud Report*. IBM Security.

Ponemon Institute. (2023). *Insider threat cost and impact study*.

Ponemon Institute. (2024). *Cost of a data breach report*.

Ponemon Institute. (2024). *Cost of a Healthcare Data Breach Report*. IBM Security.

Ponemon Institute. (2024). *Cost of healthcare data breaches study*.

RAND Corporation. (2023). *Corporate Espionage and Economic Security in the Digital Age*.

RAND Corporation. (2023). *Cyber Espionage and State Security Dynamics*. RAND Research Reports.

Reinsel, D., Gantz, J., & Rydning, J. (2018). *The digitization of the world: From edge to core*. International Data Corporation (IDC).

Richards, N. M., & Hartzog, W. (2022). *Breached! Why Data Security Law Fails and How to Improve It*. Oxford University Press.

Russell, S. (2019). *Human Compatible: Artificial Intelligence and the Problem of Control*. Viking.

Russell, S., & Norvig, P. (2021). *Artificial intelligence: A modern approach* (4th ed.). Hoboken, NJ: Pearson.

Russell, S., & Norvig, P. (2021). *Artificial intelligence: A modern approach* (4th ed.). Pearson.

Russell, S., & Norvig, P. (2021). *Artificial Intelligence: A Modern Approach*. Pearson Education.

Russell, S., & Norvig, P. (2021). *Artificial Intelligence: A Modern Approach*. Pearson.

Saudi Data and Artificial Intelligence Authority. (2024). *Personal Data Protection Law Regulatory Framework*. Riyadh: SDAIA.

Schneier, B. (2015). *Data and Goliath: The Hidden Battles to Collect Your Data and Control Your World*. W.W. Norton & Company.

Schwab, K. (2017). *The Fourth Industrial Revolution*. Crown Business.

Shapiro, C., & Varian, H. R. (1999). *Information Rules: A Strategic Guide to the Network Economy*. Harvard Business School Press.

Shoshana, Z. (2019). *The Age of Surveillance Capitalism: The Fight for a Human Future at the New Frontier of Power*. PublicAffairs.

Solove, D. J. (2021). *The Digital Person: Technology and Privacy in the Information Age*. New York University Press.

Solove, D. J. (2021). *Understanding privacy*. Harvard University Press.

Solove, D. J., & Schwartz, P. M. (2020). *Information privacy law* (7th ed.). Wolters Kluwer.

Solove, D. J., & Schwartz, P. M. (2024). *Information Privacy Law* (8th ed.). Wolters Kluwer.

Stallings, W. (2020). *Effective cybersecurity: A guide to using best practices and standards*. Pearson.

Stanford University. (2024). *AI Index Report 2024: Artificial Intelligence Collaboration and Ethics*. Stanford: Stanford Institute for Human-Centered AI.

Symantec. (2023). *Internet Security Threat Report*. Broadcom Inc.

The Economist. (2017, May 6). *The world's most valuable resource is no longer oil, but data*.

Tufekci, Z. (2015). Algorithmic harms beyond Facebook and Google: Emergent challenges of computational agency. *Colorado Technology Law Journal, 13*(203), 203–218.

UNCTAD. (2024). *Digital Economy Report 2024*. United Nations.

UNCTAD. (2024). *Digital Economy Report*. United Nations Conference on Trade and Development.

UNDP. (2023). *Human Development Report: Digital Inequality and Social Protection*. United Nations Development Programme.

UNESCO. (2021). *Recommendation on the Ethics of Artificial Intelligence*. United Nations Educational, Scientific and Cultural Organization.

UNESCO. (2023). *Ethics of Artificial Intelligence and Data Governance*. United Nations Educational, Scientific and Cultural Organization.

UNESCO. (2023). *Ethics of Artificial Intelligence and Data Justice*. United Nations Educational, Scientific and Cultural Organization.

UNESCO. (2023). *Ethics of Artificial Intelligence Recommendation*. United Nations Educational, Scientific and Cultural Organization.

UNESCO. (2023). *Ethics of Digital Technologies and Online Harm*. United Nations Educational, Scientific and Cultural Organization.

UNICEF. (2023). *The State of the World’s Children: Online Safety and Digital Violence*. United Nations Children’s Fund.

United Arab Emirates Government. (2024). *Federal Personal Data Protection Law and Executive Regulations*. Abu Dhabi: UAE Government.

United Nations Conference on Trade and Development (UNCTAD). (2023). *Digital Economy Report 2023*. Geneva: United Nations.

United Nations Conference on Trade and Development (UNCTAD). (2023). *Digital Economy Report 2023: Cross-Border Data Flows and Development*. Geneva: United Nations.

United Nations Conference on Trade and Development (UNCTAD). (2023). *Digital Economy Report: Cross-Border Data Flows and Development*. Geneva: United Nations.

United Nations Conference on Trade and Development (UNCTAD). (2024). *Digital Economy Report 2024*. United Nations.

United Nations Conference on Trade and Development (UNCTAD). (2024). *Digital economy report 2024: Governing data for development*. New York: United Nations.

United Nations Conference on Trade and Development (UNCTAD). (2024). *Digital economy report 2024: Governing data for development*. United Nations.

United Nations Educational, Scientific and Cultural Organization (UNESCO). (2021). *Media and Information Literacy Curriculum Framework*. Paris: UNESCO.

United Nations Educational, Scientific and Cultural Organization (UNESCO). (2021). *Recommendation on the Ethics of Artificial Intelligence*. Paris: UNESCO.

United Nations Human Rights Committee (UNHRC). (1966). *International Covenant on Civil and Political Rights*.

United Nations Human Rights Council. (2019). *Resolution on the right to privacy in the digital age*.

United Nations Office on Drugs and Crime (UNODC). (2023). *Global Programme on Cybercrime*. Vienna: United Nations.

United Nations. (1948). *Universal Declaration of Human Rights*.

United Nations. (1966). *International Covenant on Civil and Political Rights*.

United Nations. (2014). *The right to privacy in the digital age*. UN General Assembly Report.

United Nations. (2018). *Report on the right to privacy in the digital age*.

United Nations. (2021). *Report on artificial intelligence and human rights*.

United Nations. (2022). *Digital development and data governance in developing economies*. UN Publications.

United Nations. (2022). *Digital economy and data governance in Asia-Pacific*. UN Publications.

United Nations. (2022). *Digital human rights and governance in the digital age*. UN Publications.

United Nations. (2022). *Global digital governance and policy development report*. UN Publications.

United Nations. (2022). *Global digital governance report*. UN Publications.

United Nations. (2023). *Digital Cooperation Report: Advancing Inclusive Digital Transformation*. New York: United Nations.

United Nations. (2023). *The right to privacy in the digital age: Report of the United Nations High Commissioner for Human Rights*. New York: United Nations.

United Nations. (2024). *Digital economy report 2024*. United Nations Conference on Trade and Development (UNCTAD).

United Nations. (2024). *Digital rights and data governance report*.

United Nations. (2024). *Global Digital Compact*. In *Pact for the Future*. United Nations.

United Nations. (2024). *Global Digital Compact: Towards an Open, Free and Secure Digital Future for All*. New York: United Nations.

UNODC. (2023). *Cybercrime and National Security Report*. United Nations Office on Drugs and Crime.

Verizon. (2025). *Data Breach Investigations Report (DBIR)*. Verizon Enterprise Solutions.

Verizon. (2025). *Data breach investigations report*.

Verizon. (2025). *Data breach investigations report*. Verizon Enterprise.

Vial, G. (2019). Understanding digital transformation: A review and a research agenda. *The Journal of Strategic Information Systems, 28*(2), 118–144. [https://doi.org/10.1016/j.jsis.2019.01.003] (https://doi.org/10.1016/j.jsis.2019.01.003)

Vial, G. (2019). Understanding digital transformation: A review and research agenda. *Journal of Strategic Information Systems, 28*(2), 118–144.

Voigt, P., & von dem Bussche, A. (2017). *The EU General Data Protection Regulation (GDPR): A practical guide*. Springer.

Wang, Y., & Sun, X. (2023). The Personal Information Protection Law and the future of privacy regulation in China. *Computer Law & Security Review, 49*, 105807.

WEF. (2024). *Global Cybersecurity Outlook*. World Economic Forum.

West, S. M. (2019). Data capitalism: Redefining the logics of surveillance and privacy. *Business & Society, 58*(1), 20–41.

Westerman, G., Bonnet, D., & McAfee, A. (2014). *Leading digital: Turning technology into business transformation*. Harvard Business Review Press.

Westin, A. (1967). *Privacy and Freedom*. Atheneum.

Westin, A. F. (2015). *Privacy and freedom*. IG Publishing.

Westin, A. F. (2023). *Privacy and Freedom in the Digital Age*. Atheneum Press.

Westin, A. F. (2023). *Privacy and Freedom in the Digital Age*. New York: Atheneum Press.

World Bank. (2021). *World Development Report 2021: Data for Better Lives*. World Bank.

World Bank. (2023). *Digital Development and Cyber Risk Report*. World Bank Publications.

World Bank. (2023). *Digital Development and Cybersecurity Report*. World Bank Publications.

World Bank. (2023). *Digital Development and Governance in Emerging Economies*. Washington, DC: World Bank.

World Bank. (2023). *Digital Development and Human Capital in Emerging Economies*. Washington, DC: World Bank.

World Bank. (2023). *Digital Development Overview: Public and Private Sector Collaboration*. Washington, DC: World Bank.

World Bank. (2023). *Digital Economy and Cyber Risk Report*. World Bank Publications.

World Bank. (2023). *Digital Risk and Cybersecurity Development Report*. World Bank Publications.

World Bank. (2023). *Digital Skills and Innovation for Development*. Washington, DC: World Bank.

World Bank. (2023). *World Development Report 2023: Data for Better Lives*. World Bank Publications.

World Bank. (2023). *World development report 2023: Data for better lives*. World Bank.

World Bank. (2023). *World development report: Data for better lives*. Washington, DC: World Bank.

World Bank. (2023). *World development report: Data for better lives*. World Bank Publications.

World Bank. (2024). *Digital Development and Social Equity Report*. World Bank Publications.

World Economic Forum. (2023). *The Global Cybersecurity Outlook 2023*. Geneva: World Economic Forum.

World Economic Forum. (2024). *Global Cybercrime and Financial Risk Outlook*. WEF.

World Economic Forum. (2024). *Global Cybersecurity Outlook 2024*. Geneva: World Economic Forum.

World Economic Forum. (2024). *Global cybersecurity outlook 2024*. World Economic Forum.

World Economic Forum. (2024). *Global Cybersecurity Outlook Report*. WEF.

World Economic Forum. (2024). *Global Cybersecurity Outlook*. WEF.

World Economic Forum. (2024). *Global Risks Report 2024*. Geneva: World Economic Forum.

World Economic Forum. (2024). *Global Risks Report: Cyber Espionage and Economic Security*.

World Economic Forum. (2024). *Global Risks Report: Digital Dependency and Cyber Threats*.

World Economic Forum. (2024). *Global Risks Report: Misinformation and Cyber Risks*. WEF.

World Economic Forum. (2024). *Governance of artificial intelligence: Global perspectives and policy frameworks*. Geneva: World Economic Forum.

World Health Organization. (2022). *COVID-19 global data sharing and surveillance report*. WHO Publications.

World Health Organization. (2022). *Global data sharing and public health intelligence report*.

World Health Organization. (2022). *Global Health Data Sharing and COVID-19 Response Report*. WHO Publications.

World Health Organization. (2023). *Health Data Protection and Cybersecurity in Healthcare Systems*. WHO Publications.

World Health Organization. (2023). *Mental Health Impacts of Digital Harassment*. WHO Publications.

Yokoyama, S., & Nakada, M. (2022). Data protection reforms in Japan and international regulatory harmonization. *Computer Law & Security Review, 45*, 105676.

Yoon, S. H., & Lee, H. J. (2021). Personal information protection and digital transformation in South Korea. *Journal of Information Policy, 11*, 324–348.

Zhang, A., & Daum, J. (2023). Data governance and digital regulation in China: Balancing innovation, security, and privacy. *Journal of Cyber Policy, 8*(2), 180–198.

Zissis, D., & Lekkas, D. (2012). Addressing cloud computing security issues. *Future Generation Computer Systems, 28*(3), 583–592.

Zuboff, S. (2019). *The Age of Surveillance Capitalism*. PublicAffairs.

Zuboff, S. (2019). *The age of surveillance capitalism: The fight for a human future at the new frontier of power*. New York: PublicAffairs.

Zuboff, S. (2019). *The Age of Surveillance Capitalism: The Fight for a Human Future at the New Frontier of Power*. PublicAffairs.

APPENDICES

Supporting Materials for Global Data Governance and Data Protection

Introduction

The appendices provide supplementary material designed to support and extend the discussion presented throughout this book on global data governance, data protection, privacy regulation, cybersecurity, digital transformation, and the growing importance of responsible technology management. While the main chapters examine the theoretical, legal, technological, organizational, and policy dimensions of data governance, the appendices provide structured reference materials that allow readers to examine selected issues in a more practical and comparative manner.

The materials included in these appendices serve several important purposes. First, they demonstrate the practical consequences of failures in data governance through selected major data breach and data misuse cases. Second, they provide a comparative overview of major privacy and data protection frameworks operating in different regions of the world. Third, they examine the development of data protection legislation across selected Asian countries, illustrating both the rapid expansion of regulatory frameworks and the continuing differences in implementation and institutional maturity. Finally, the appendices provide a Data Governance Assessment Framework that may be used by governments, organizations, researchers, regulators, and institutions to evaluate the maturity and effectiveness of their own data governance systems.

The appendices should therefore be viewed as practical supporting tools rather than as isolated supplementary materials. They reinforce the central argument that effective data governance requires more than the existence of legislation or technical cybersecurity systems. A comprehensive approach requires the integration of legal compliance, institutional capacity, technological safeguards, organizational accountability, ethical principles, public awareness, and continuous improvement.

Together, these appendices provide an additional reference foundation for researchers, policymakers, students, business leaders, information technology professionals, cybersecurity practitioners, and other stakeholders engaged in the development and management of responsible digital systems.